> For the complete documentation index, see [llms.txt](https://gowthams.gitbook.io/bughunter-handbook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/recon-and-osint/param-discovery.md).

# Parameter / Content Discovery

* gospider
* paramspider
* hakcrawler
* arjun
* httpx
* <https://github.com/edoardottt/cariddi>

Tweets:

{% embed url="<https://twitter.com/stokfredrik/status/1316661667267305472>" %}

{% embed url="<https://twitter.com/pry0cc/status/1316357215985561602>" %}

[gau + anti-burl + secretfinder = informations disclosure@TomNomNom@Yassineaboukir@stokfred](https://twitter.com/m4ll0k/status/1275047986180100096?s=20)rik[<br>](https://twitter.com/m4ll0k/status/1275047986180100096/photo/1)

![](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MTAG32x4zmpR71oTQ3S%2F-MTAGMrXlBD_KI0LLlya%2Fimage.png?alt=media\&token=1d487c2f-5dfc-479c-bc19-a31a56da1392)

[I just released Parth It finds commonly vulnerable parameter names to prioritize their testing. See screenshot below. You can import your@Burp\_Suite history, discover URLs using CommonCrawl, OTX and Waybackmachine or a simple txt file. Github: ](https://twitter.com/s0md3v/status/1296132598574362624?s=20)[https://github.com/s0md3v/Parth](https://t.co/eoDI0ut6nj?amp=1)

![](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MTAGWD4acqs0zqJ7hoa%2F-MTAGck_Ey_m0Px488Vy%2Fimage.png?alt=media\&token=3a4be0de-6a34-438b-adac-1ae20521bbf0)

![](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MTANEMSBBpfCHS7zf16%2F-MTBktDck1f25pnk10un%2Fimage.png?alt=media\&token=0240261e-fa90-4ffa-a5ac-b883c957a23f)

![https://twitter.com/Haoneses/status/1291387580299321358?s=20](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MTBmK_33BbxDL-HTLq_%2F-MTFq10IJE4nlpm0sISp%2Fimage.png?alt=media\&token=adc4d20f-d28c-492f-8a80-eb91d51c2917)

{% embed url="<https://twitter.com/imran407704/status/1297851186721067008?s=20>" %}

![](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MTG0UnNVsKqOfYELR2z%2F-MTG0_Kx45LhGsHk8Nb2%2Fimage.png?alt=media\&token=8a2cac27-3f17-4742-b127-5410280eed0f)

Tools:

* <https://github.com/dwisiswant0/galer>

{% embed url="<https://twitter.com/ITSecurityguard/status/1406630113102413827?s=20>" %}

{% embed url="<https://github.com/Sh1Yo/x8>" %}

{% embed url="<https://medium.com/geekculture/params-discovering-hidden-treasure-in-webapps-b4a78509290f>" %}