Paramuda 2.0 alpha

Paramuda is a python tool designed to enumerate hidden parameters on a target URL through a wordlist. It is designed to scan for URL by counting the existence of the payload in the response body.

Usage

>python paramuda.py -u https://example.com/

Requirements

• Python 2
• Requests lib pip install requests
• Tested on windows 10

Paramuda arguments

>python paramuda.py -h
usage: paramuda [-h] [-v] (-u URL | -r REQUEST) [-w WORDLIST | -b {1,2,3}]
                [-n NPARAMSPERREQ] [-t THREADS] [-p PAYLOAD]
                [-e EXCLUDEPARAMS]

___________________________________________
paramuda url params scan
paramuda v.2.0 alpha
Author: Seif Elsallamy
Github: https://github.com/seifelsallamy/paramuda
___________________________________________

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         show program's version number and exit
  -u URL, --url URL     target URL
  -r REQUEST, --request REQUEST
                        specific path to raw request file
  -w WORDLIST, --wordlist WORDLIST
                        specific path to wordlist file
  -b {1,2,3}, --bruteforce {1,2,3}
                        bruteforcing params level from 1 to 3 default = 1
  -n NPARAMSPERREQ, --nparamsperreq NPARAMSPERREQ
                        Number of parameters per request default=50
  -t THREADS, --threads THREADS
                        Number of threads default=5
  -p PAYLOAD, --payload PAYLOAD
                        Payload for testing default=qqq000
  -e EXCLUDEPARAMS, --excludeParams EXCLUDEPARAMS
                        Exclude parameters example "sid,firName,loginId"