🛠️ Arjun

Primary: 01 - Web Security

Secondary: 02 - Enumeration

Installation

Arjun is a tool designed to find hidden HTTP parameter.

sudo apt install arjun

Common Commands

Command	Description
arjun -u <target_URL>	Basic GET scan
arjun -u <target_URL> -w <wordlist>	Scan against a custom wordlist
arjun -u <target_URL> -m POST	POST request scan
arjun -u <target_URL> -m JSON	Scan with a JSON body
arjun -i targets.txt	Scan multiple targets
arjun -u <target_URL> --passive	Query external databases for past parameters
arjun -u <target_URL> --stable	Dealing with rate-limiting by adding random delay
arjun -u <target_URL> --rate-limit <some_number>	Limit the number of request per second
arjun -u <target_URL> --headers "Cookie: session=<...>; Authorization: <...>"	Authenticated scanning
arjun -u <target_URL> -oJ results.json	Output into a json file

Related Usage

CTFs

File	Created
BKSEC - Happy Soldier	Tuesday, February 17th 2026, 11:01:44 pm
BKSEC - Happy Soldier Revenge	Tuesday, February 17th 2026, 11:10:48 pm