Param Discover banner
Awarexone Awarexone

Param Discover

Development community

Description

--- description: Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback). Hidden params are gold for IDOR, SSRF, LFI, redirect, and authorization bypass — often missed by automated scanners. Usage: /param-discover <url> | /param-discover -l <urls-file> --- # /param-discover Find HTTP parameters the application accepts but doesn't link from any visible endpoint. Useful when an endpoint looks unreachable or returns a generic response — often a hidden `id`, `user`, `

Installation

Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover/SKILL.md

Terminal
mkdir -p ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover && curl -fsSL https://raw.githubusercontent.com/Awarexone/Agentic-Bug-Hunter/HEAD/commands/param-discover.md -o ~/.claude/skills/awarexone-agentic-bug-hunter-param-discover/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

Full documentation available on GitHub

View Source Repository