s0md3v/Arjun
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Somdev Sangwan
2019-10-23 13:30:57 +05:30
committed by GitHub
parent 23849fd729
commit 1566009a10
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@@ -16,7 +16,6 @@
<a href="https://github.com/s0md3v/Arjun/issues?q=is%3Aissue+is%3Aclosed">
<img src="https://img.shields.io/github/issues-closed-raw/s0md3v/Arjun.svg">
</a>
<img src="https://img.shields.io/badge/god%20level-shit-green.svg">
</p>
![demo](https://i.ibb.co/0V6ymPy/Screenshot-2019-04-12-18-17-49.png)
@@ -29,28 +28,29 @@ Web applications use parameters (or queries) to accept user input, take the foll
This URL seems to load user information for a specific user id, but what if there exists a parameter named `admin` which when set to `True` makes the endpoint provide more information about the user?\
This is what Arjun does, it finds valid HTTP parameters with a huge default dictionary of 25,980 parameter names.
The best part? It takes less than 30 seconds to go through this huge list while making just 30-35 requests to the target.\
The best part? It takes less than 30 seconds to go through this huge list while making just 50-60 requests to the target.\
Want to know how Arjun does that? [Here's how](https://github.com/s0md3v/Arjun/wiki/How-Arjun-works%3F).
### Features
- Multi-threading
- Thorough detection
- `GET/POST/JSON` methods supported
- Automatic rate limit handling
- A typical scan takes 30 seconds
- Regex powered heuristic scanning
- `GET/POST/JSON` methods supported
- Huge list of 25,980 parameter names
- Makes just 30-35 requests to the target
> **Note:** Arjun doesn't work with python < 3.4
#### How to use Arjun?
A detailed usage guide is available on [Usage](https://github.com/s0md3v/Arjun/wiki/Usage) section of the Wiki.\
An index of options is given below:
- [Scanning a single URL](https://github.com/s0md3v/Arjun/wiki/Usage#scanning-a-single-url)
- [Scanning multiple URLs](https://github.com/s0md3v/Arjun/wiki/Usage#scanning-multiple-urls)
- [Choosing number of threads](https://github.com/s0md3v/Arjun/wiki/Usage#multi-threading)
- [Handling rate limits](https://github.com/s0md3v/Arjun/wiki/Usage#handling-rate-limits)
- [Delay between requests](https://github.com/s0md3v/Arjun/wiki/Usage#delay-between-requests)
- [Including presistent data](https://github.com/s0md3v/Arjun/wiki/Usage#including-persistent-data)
- [Saving output to a file](https://github.com/s0md3v/Arjun/wiki/Usage#saving-output-to-a-file)