Bug#1027454: ITP: arjun -- HTTP parameter discovery suite

From	Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel
Subject	Bug#1027454: ITP: arjun -- HTTP parameter discovery suite
Date	2022-12-31 20:10 +0100
Message-ID	<FIPoZ-eEFs-3@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Package: wnpp
Severity: wishlist
Owner: Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com>
X-Debbugs-Cc: debian-devel@lists.debian.org, guilherme.lnx@gmail.com, debian-security-tools@lists.debian.org, s0md3v@gmail.com

* Package name    : arjun
  Version         : 2.2.1
  Upstream Contact: Somdev Sangwan <s0md3v@gmail.com>
* URL             : https://github.com/s0md3v/Arjun
* License         : AGPL-3
  Programming Lang: Python
  Description     : HTTP parameter discovery suite

 This package can find query parameters for URL endpoints. If you don't get
 what that means, it's okay, read along.
 .
 Web applications use parameters (or queries) to accept user input, take the
 following example into consideration:
 http://api.example.com/v1/userinfo?id=751634589
 .
 This URL seems to load user information for a specific user id, but what if
 there exists a parameter named admin which when set to True makes the
 endpoint provide more information about the user?
 This is what Arjun does, it finds valid HTTP parameters with a huge default
 dictionary of 25,890 parameter names.

Back to linux.debian.devel | Previous | Next | Find similar | Unroll thread

Thread

Bug#1027454: ITP: arjun -- HTTP parameter discovery suite Guilherme de Paula Xavier Segundo <guilherme.lnx@gmail.com> - 2022-12-31 20:10 +0100

csiph-web