# Arjun

> Use this skill when the user wants to discover hidden HTTP parameters on web endpoints for security testing or API enumeration.

- Skill: `javimosch/arjun` (Agent Skill)
- Install (CLI): `npx skillmds@latest add javimosch/arjun`
- Raw SKILL.md: https://api.skillmd.com/api/skills/javimosch/arjun/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: javimosch (https://skillmd.com/u/javimosch)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/javimosch/arjun

---


# Arjun Plugin

Arjun discovers hidden HTTP GET/POST parameters.

## Usage Examples

- "find hidden parameters on a web endpoint"
- "discover API parameters with rate limiting"
- "output discovered parameters as JSON"

## Installation

```bash
pip install arjun
```

## Key Features
- Hidden GET/POST parameter discovery
- Intelligent wordlist brute-forcing
- Rate limiting and throttling
- Proxy support
- JSON output for tool integration
- Multi-target scanning