---
title: "Discover Hidden Parameters for Web App Vulnerabilities 🔍🕵️‍♂️"
description: "Find undocumented parameters in web applications using Arjun and Waybackurls, and turn those hidden inputs into real attack surface."
canonical_url: "https://amrelsagaei.com/discover-hidden-parameters-for-web-app-vulnerabilities"
last_updated: "2025-02-05"
---

<post-media video="q5VT1js5KZg">



</post-media>

## Introduction

In the ever-evolving realm of cybersecurity, the quest to unveil hidden parameters within web applications takes center stage. Armed with powerful tools like Arjun and Waybackurls, security enthusiasts, penetration testers, and bug bounty hunters gain a comprehensive toolkit for identifying potential vulnerabilities. In this guide, we embark on an in-depth exploration of these methods, providing step-by-step insights to elevate your web security endeavors.

## [Arjun](https://github.com/s0md3v/Arjun?utm_source=amrelsagaei.com&utm_medium=referral)Method

#### **Installation**

Ensure you have [Arjun](https://github.com/s0md3v/Arjun?utm_source=amrelsagaei.com&utm_medium=referral)installed on your machine by executing the following command:

```bash
sudo apt install arjun -y
```

#### **Usage**

Explore Arjun's capabilities by checking its help menu

```bash
arjun -h
```

To analyze a specific URL for hidden parameters, use the following command:

```bash
arjun -u http://example.com/
```

[Arjun](https://github.com/s0md3v/Arjun?utm_source=amrelsagaei.com&utm_medium=referral)offers flexibility by allowing you to specify the type of request data to search for, such as GET, POST, or JSON parameters

```bash
arjun -u http://example.com/ --get
arjun -u http://example.com/ --post
arjun -u http://example.com/ --json
```

Extend your exploration by providing a list of multiple URLs or utilizing a custom wordlist for parameter names:

```bash
arjun --urls urls.txt
arjun -u http://example.com/ -f parameters.txt
```

Customize the number of threads and the delay between requests for optimal performance:

```bash
arjun -u http://example.com/ -t 16
arjun -u http://example.com/ -d 5
arjun -u http://example.com/ --stable
```

Save and analyze results in JSON format:

```bash
arjun -u http://example.com/ -o results.json
```

## [Waybackurls](https://github.com/tomnomnom/waybackurls?utm_source=amrelsagaei.com&utm_medium=referral)Method

#### **Installation**

For the second method, leverage the capabilities of [Waybackurls](https://github.com/tomnomnom/waybackurls?utm_source=amrelsagaei.com&utm_medium=referral). Install it with the following command:

```bash
go install github.com/tomnomnom/waybackurls@latest
```

#### **Usage**

Create a file containing the target domain:

```bash
echo domain.com | waybackurls | tee URLs.txt
```

Filter URLs with parameters to create a focused list

```bash
cat URLs.txt | grep =$ >> parameters.txt
```

## Conclusion

[Arjun](https://github.com/s0md3v/Arjun?utm_source=amrelsagaei.com&utm_medium=referral)and [Waybackurls](https://github.com/tomnomnom/waybackurls?utm_source=amrelsagaei.com&utm_medium=referral)emerge as indispensable allies in discovering hidden parameters. Whether you're a seasoned penetration tester or a security enthusiast, these methods provide detailed insights into potential vulnerabilities within web applications. As you navigate the intricate landscape of web security, incorporate these techniques into your arsenal, fortifying your defenses and staying one step ahead of potential threats.

**If you have any questions about this tutorial please leave a comment below or reach out to me on Twitter**[**@amrelsagaei**](https://twitter.com/amrelsagaei?utm_source=amrelsagaei.com&utm_medium=referral)**.** **Happy hunting!**

## Sitemap

See the full [sitemap](/sitemap.md) for all pages.