Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1130982 > unrolled thread

Bug#1027454: ITP: arjun -- HTTP parameter discovery suite

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1027454: ITP: arjun -- HTTP parameter discovery suite Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> - 2022-12-31 20:10 +0100

#1130982 — Bug#1027454: ITP: arjun -- HTTP parameter discovery suite

Package: wnpp
Severity: wishlist
Owner: Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com>
X-Debbugs-Cc: debian-devel@lists.debian.org, guilherme.lnx@gmail.com, debian-security-tools@lists.debian.org, s0md3v@gmail.com

* Package name    : arjun
  Version         : 2.2.1
  Upstream Contact: Somdev Sangwan <s0md3v@gmail.com>
* URL             : https://github.com/s0md3v/Arjun
* License         : AGPL-3
  Programming Lang: Python
  Description     : HTTP parameter discovery suite

 This package can find query parameters for URL endpoints. If you don't get
 what that means, it's okay, read along.
 .
 Web applications use parameters (or queries) to accept user input, take the
 following example into consideration:
 http://api.example.com/v1/userinfo?id=751634589
 .
 This URL seems to load user information for a specific user id, but what if
 there exists a parameter named admin which when set to True makes the
 endpoint provide more information about the user?
 This is what Arjun does, it finds valid HTTP parameters with a huge default
 dictionary of 25,890 parameter names.

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web