A simple tool to help discovering hidden parameters.
go install -v github.com/pyneda/paramsmap@latest
or
git clone https://github.com/pyneda/paramsmap
cd paramsmap
go build
Scan a URL:
paramsmap -url "https://example.com" -wordlist params.txt -chunk-size 500
See all options:
paramsmap -h
The discovery approach is based on the methodology used in Arjun, as described here.