ParamHunter v0.8 is a real and operational CLI tool for extracting URL parameters from websites. It is designed for security researchers, bug bounty hunters, and penetration testers.
-
Multithreading scanning for faster processing
-
GET and POST request support with optional data
-
Proxy support for anonymous scanning
-
Timeout, retry, and backoff settings
-
Output in TXT, JSON, and CSV formats
-
Rich CLI banner (if
richlibrary is installed) -
ASCII banner for professional CLI appearance
-
Handles multiple URLs from a list file
โ ๏ธ Important > Use this tool only on websites you have permission to test. Unauthorized scanning may be illegal.
Recommended (from PyPI):
| Option | Description |
|---|---|
-u, --url |
Scan a single target URL |
-l, --list |
Scan multiple URLs from a file |
-o, --output |
Base name for output files (default: results) |
--txt |
Save output as TXT |
--json |
Save output as JSON |
--csv |
Save output as CSV |
--threads |
Number of concurrent threads (default: 10) |
--method |
Request method: GET or POST (default: GET) |
--data |
POST data to send |
--proxy |
Proxy URL |
--timeout |
Request timeout in seconds (default: 5.0) |
--retries |
Number of retry attempts (default: 2) |
--backoff |
Backoff factor for retries (default: 0.5) |
--no-banner |
Disable ASCII/Rich CLI banner |
pip install paramhunter[rich]Or from source:
git clone https://github.com/YOUR_USERNAME/ParamHunter.git
cd ParamHunter
pip install -e .[rich]paramhunter -u "https://example.com/?id=1" --txt --json --csvparamhunter -l urls_example.txt --txt --csv| Option | Description |
|---|---|
-u, --url |
Scan a single target URL |
-l, --list |
Scan multiple URLs from a file |
-o, --output |
Base name for output files (default: results) |
--txt |
Save output as TXT |
--json |
Save output as JSON |
--csv |
Save output as CSV |
--threads |
Number of concurrent threads (default: 10) |
--method |
Request method: GET or POST (default: GET) |
--data |
POST data to send |
--proxy |
Proxy URL |
--timeout |
Request timeout in seconds (default: 5.0) |
--retries |
Number of retry attempts (default: 2) |
--backoff |
Backoff factor for retries (default: 0.5) |
--no-banner |
Disable ASCII/Rich CLI banner |
See urls_example.txt for sample targets.
โ ๏ธ Use this tool only on websites you have permission to test.