Termux Tools Logo

Termux Tools & Commands

Install as App • Fast Access

Install Termux Tools as an app on your phone for faster access and better experience.

Arjun – HTTP Parameter Discovery and Testing Tool

Arjun is a simple command-line tool that helps find hidden HTTP parameters in web applications. It can test a target URL with different parameter names and supports GET, POST, XML, and JSON requests. You can install Arjun in Termux using Python and pip, then use simple commands to learn about HTTP parameter discovery.

Here’s what you can do with Arjun in Termux:

  • Find hidden HTTP parameters.
  • Test GET and POST parameters.
  • Test XML and JSON parameters.
  • Use a custom wordlist.
  • Scan multiple URLs from a file.
  • Save results in JSON or text format.
  • Add custom HTTP headers.
  • Use passive sources to collect parameter names.
  • Control request delay and thread count.
  • Set a request rate limit.

Install Arjun in Termux

Arjun is easy to install in Termux because it is available through pip. You only need to run the command below, and the tool will be installed automatically.

Update Termux packages.

pkg update && pkg upgrade -y

Install Python.

pkg install python -y

Install Arjun.

pip install arjun

Arjun is now installed and ready to use.

Arjun Usage Commands

After installing Arjun, you can use different commands to find HTTP parameters and control how the tool performs its scans. Below are some useful Arjun commands with simple examples.

Show the Arjun help menu.

arjun -h

Scan a target URL.

arjun -u https://example.com

Save the results to a JSON file.

arjun -u https://example.com -o results.json

Save the results to a text file.

arjun -u https://example.com -oT results.txt

Use a custom wordlist.

arjun -u https://example.com -w wordlist.txt

Use the POST method.

arjun -u https://example.com -m POST

Import multiple target URLs from a file.

arjun -i urls.txt

Set the number of concurrent threads.

arjun -u https://example.com -t 10

Set a delay between requests.

arjun -u https://example.com -d 1

Set the request timeout.

arjun -u https://example.com -T 30

Set the maximum request rate.

arjun -u https://example.com --rate-limit 10

Add custom HTTP headers.

arjun -u https://example.com --headers

Use passive sources to collect parameter names.

arjun -u https://example.com --passive

Use stable mode.

arjun -u https://example.com --stable

Disable redirects.

arjun -u https://example.com --disable-redirects

Use a specific parameter casing style.

arjun -u https://example.com --casing likeThis

Use quiet mode.

arjun -u https://example.com -q

Set the chunk size.

arjun -u https://example.com -c 10

Arjun can also send results to Burp Suite Proxy. The default Burp proxy address is 127.0.0.1:8080.

arjun -u https://example.com -oB

You can specify a different Burp proxy address when needed.

arjun -u https://example.com -oB 127.0.0.1:8080

You can choose different options to control the scan and save the results for later use.

End Note

Arjun is a simple and useful tool for finding hidden HTTP parameters that provides different options for testing URLs, using wordlists, saving results, and controlling requests while allowing you to explore HTTP parameters and learn more about web application requests in Termux

SHARE THIS POST: