Arjun

HTTP parameter discovery tool that finds hidden query, POST, and JSON parameters on an endpoint.

Desktopfree

Arjun is a free, open-source command-line tool that discovers hidden HTTP parameters on a URL endpoint by testing it against a dictionary of nearly 26,000 known parameter names, typically finishing in under 10 seconds. It supports GET, POST, POST-JSON, and POST-XML requests and can import targets from or export results to Burp Suite. It's aimed at security researchers doing authorized reconnaissance.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Arjun - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Arjun to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Arjun (or something else) actually fits.

Try a problem