logo

Parameter Discovery: A quick guide to start

ID: 65b70fb6-ea84-5b8f-ac39-504a46d98757

STIX ID: report--65b70fb6-ea84-5b8f-ac39-504a46d98757

Feed Name: YesWeHack Blog

Date Published: 2022-04-20

Date Updated: 2026-07-04

...
...

This article introduces parameter discovery as a reconnaissance technique to find unreferenced or hidden parameters in web applications, discusses tools (Arjun, ParamSpider, Param-Miner), and demonstrates an automated chaining workflow (ParamSpider → GF XSS patterns → Dalfox) to identify potential Cross-Site Scripting issues.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.