├── .gitignore ├── BappDescription.html ├── BappManifest.bmf ├── LICENSE ├── ParamMinorIcon.png ├── ParamMinorIcon.svg ├── README.md ├── bulkScan-all.jar ├── gradle └── wrapper │ ├── gradle-wrapper.jar │ └── gradle-wrapper.properties ├── gradlew ├── gradlew.bat ├── param-miner.iml ├── proxy.md ├── resources ├── assetnote-params ├── boring_headers ├── fierce-subdomains ├── functions ├── headers ├── params ├── wafparams └── words ├── settings.gradle └── src └── burp ├── BurpExtender.java ├── DiscoveredParam.java ├── DomainProvider.java ├── FatGet.java ├── GrabScan.java ├── HeaderGuessScan.java ├── HeaderMutationGuesser.java ├── HeaderMutationScan.java ├── InputTransformationParamScan.java ├── Keysmith.java ├── Lenscrack.java ├── Lensmine.java ├── Lensprobe.java ├── NormalisedParamScan.java ├── NormalisedPathScan.java ├── OfferHostnameOverride.java ├── OfferParamGuess.java ├── ParamAttack.java ├── ParamGrabber.java ├── ParamGuesser.java ├── ParamHolder.java ├── PortDOS.java ├── Probe.java ├── RailsUtmScan.java ├── RandomComparator.java ├── RespPair.java ├── TimeInjector.java ├── TriggerParamGuesser.java ├── UnkeyedParamScan.java ├── ValueGuesser.java ├── ValueProbes.java └── WordProvider.java /.gitignore: -------------------------------------------------------------------------------- 1 | .gradle/ 2 | .idea/ 3 | build/ 4 | -------------------------------------------------------------------------------- /BappDescription.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/BappDescription.html -------------------------------------------------------------------------------- /BappManifest.bmf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/BappManifest.bmf -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/LICENSE -------------------------------------------------------------------------------- /ParamMinorIcon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/ParamMinorIcon.png -------------------------------------------------------------------------------- /ParamMinorIcon.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/ParamMinorIcon.svg -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/README.md -------------------------------------------------------------------------------- /bulkScan-all.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/bulkScan-all.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/gradle/wrapper/gradle-wrapper.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/gradle/wrapper/gradle-wrapper.properties -------------------------------------------------------------------------------- /gradlew: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/gradlew -------------------------------------------------------------------------------- /gradlew.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/gradlew.bat -------------------------------------------------------------------------------- /param-miner.iml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/param-miner.iml -------------------------------------------------------------------------------- /proxy.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/proxy.md -------------------------------------------------------------------------------- /resources/assetnote-params: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/assetnote-params -------------------------------------------------------------------------------- /resources/boring_headers: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/boring_headers -------------------------------------------------------------------------------- /resources/fierce-subdomains: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/fierce-subdomains -------------------------------------------------------------------------------- /resources/functions: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/functions -------------------------------------------------------------------------------- /resources/headers: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/headers -------------------------------------------------------------------------------- /resources/params: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/params -------------------------------------------------------------------------------- /resources/wafparams: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/wafparams -------------------------------------------------------------------------------- /resources/words: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/resources/words -------------------------------------------------------------------------------- /settings.gradle: -------------------------------------------------------------------------------- 1 | rootProject.name = 'param-miner' 2 | -------------------------------------------------------------------------------- /src/burp/BurpExtender.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/BurpExtender.java -------------------------------------------------------------------------------- /src/burp/DiscoveredParam.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/DiscoveredParam.java -------------------------------------------------------------------------------- /src/burp/DomainProvider.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/DomainProvider.java -------------------------------------------------------------------------------- /src/burp/FatGet.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/FatGet.java -------------------------------------------------------------------------------- /src/burp/GrabScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/GrabScan.java -------------------------------------------------------------------------------- /src/burp/HeaderGuessScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/HeaderGuessScan.java -------------------------------------------------------------------------------- /src/burp/HeaderMutationGuesser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/HeaderMutationGuesser.java -------------------------------------------------------------------------------- /src/burp/HeaderMutationScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/HeaderMutationScan.java -------------------------------------------------------------------------------- /src/burp/InputTransformationParamScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/InputTransformationParamScan.java -------------------------------------------------------------------------------- /src/burp/Keysmith.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/Keysmith.java -------------------------------------------------------------------------------- /src/burp/Lenscrack.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/Lenscrack.java -------------------------------------------------------------------------------- /src/burp/Lensmine.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/Lensmine.java -------------------------------------------------------------------------------- /src/burp/Lensprobe.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/Lensprobe.java -------------------------------------------------------------------------------- /src/burp/NormalisedParamScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/NormalisedParamScan.java -------------------------------------------------------------------------------- /src/burp/NormalisedPathScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/NormalisedPathScan.java -------------------------------------------------------------------------------- /src/burp/OfferHostnameOverride.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/OfferHostnameOverride.java -------------------------------------------------------------------------------- /src/burp/OfferParamGuess.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/OfferParamGuess.java -------------------------------------------------------------------------------- /src/burp/ParamAttack.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/ParamAttack.java -------------------------------------------------------------------------------- /src/burp/ParamGrabber.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/ParamGrabber.java -------------------------------------------------------------------------------- /src/burp/ParamGuesser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/ParamGuesser.java -------------------------------------------------------------------------------- /src/burp/ParamHolder.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/ParamHolder.java -------------------------------------------------------------------------------- /src/burp/PortDOS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/PortDOS.java -------------------------------------------------------------------------------- /src/burp/Probe.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/Probe.java -------------------------------------------------------------------------------- /src/burp/RailsUtmScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/RailsUtmScan.java -------------------------------------------------------------------------------- /src/burp/RandomComparator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/RandomComparator.java -------------------------------------------------------------------------------- /src/burp/RespPair.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/RespPair.java -------------------------------------------------------------------------------- /src/burp/TimeInjector.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/TimeInjector.java -------------------------------------------------------------------------------- /src/burp/TriggerParamGuesser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/TriggerParamGuesser.java -------------------------------------------------------------------------------- /src/burp/UnkeyedParamScan.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/UnkeyedParamScan.java -------------------------------------------------------------------------------- /src/burp/ValueGuesser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/ValueGuesser.java -------------------------------------------------------------------------------- /src/burp/ValueProbes.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/ValueProbes.java -------------------------------------------------------------------------------- /src/burp/WordProvider.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PortSwigger/param-miner/HEAD/src/burp/WordProvider.java --------------------------------------------------------------------------------