API Tooling
Reconnaissance
Check out OSINT, for releveant asset discovery tooling.
Identifying Parameters
- Arjun Arjun comes configured with a wordlist containing nearly 26,000 parameters, and unlike Wfuzz, it does some of the filtering for you using its preconfigured anomaly detection.