Param Discover — Development skill for Claude Code
Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback).
How to install Param Discover
Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover/SKILL.md
mkdir -p ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover && curl -fsSL https://raw.githubusercontent.com/Awarexone/Agentic-Bug-Hunter/HEAD/commands/param-discover.md -o ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Param Discover does
description: Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback). Hidden params are gold for IDOR, SSRF, LFI, redirect, and authorization bypass — often missed by automated scanners. Usage: /param-discover | /param-discover -l
/param-discover
Find HTTP parameters the application accepts but doesn't link from any visible endpoint. Useful when an endpoint looks unreachable or returns a generic response — often a hidden `id`, `user`, `
Alternatives in Development
- Custom Dimensions — Custom Dimensions and Event Parameters 242 ★
- Symfony Voters — Implement authorization logic using Symfony Voters 206 ★
- Healthcare — Skills for healthcare workflows including clinical trials, prior authorization review, and FHIR API developmen 204 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Hunt Ssrf
Active SSRF hunt for an ingested program. Consumes webvuln-surface seeds (ssrf_likely params + URL-accepting i
Xc MCP
XCode CLI MCP: Convenience wrapper for Xcode CLI tools & iOS Simulator. Progressive disclosure of tool respons
Axguard Path
Path traversal / LFI — open/join, send_file, PHP include with variables. Usage: /axguard-path [path]
Vida Xps2pdf
Scanne das VM-Austauschverzeichnis auf dem Host nach neuen XPS-Druckdokumenten aus VIDA, wandle sie in PDFs um
Relances
Scanne Gmail (+ agenda si dispo) pour les fils qui attendent une réponse et les liste par priorité. Lecture se
Run Work
Propose portfolio batches (scan-only). No-target scan produces a batch recommendation; all target invocations
Related Agents
Zp Class Hunter
ZeroProtocol single-class vulnerability hunter. Use to hunt exactly one vulnerability class against one in-sco
Pentester
Adversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDO
Chain Builder
Exploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Kno