Param Miner
A command-line tool that identifies and extracts parameters from HTTP requests and responses to assist with web application security testing and vulnerability assessment.
A command-line tool that identifies and extracts parameters from HTTP requests and responses to assist with web application security testing and vulnerability assessment.
Checked October 2026.
Param Miner is a command-line tool designed for identifying and extracting parameters from HTTP requests and responses during web application security testing.
The tool scans HTTP traffic to discover hidden or undocumented parameters that may not be immediately visible through standard web application interfaces. This capability helps security professionals identify potential attack vectors and vulnerabilities that could be exploited through parameter manipulation.
Param Miner operates by analyzing HTTP communications and extracting parameter data for further security analysis. The tool supports vulnerability assessment workflows by providing detailed parameter information that can reveal security weaknesses in web applications.
The extracted parameter data can be used to identify potential security issues such as parameter pollution, hidden functionality, or unvalidated input fields that could lead to various web application vulnerabilities.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Param Miner: features, pricing and alternatives.
Param Miner is a product in the Penetration Testing category. It covers Web Security.
Param Miner is free. Download and setup instructions are at https://github.com/PortSwigger/param-miner/.
Alternatives to Param Miner listed on CybersecTools:
Compare all Param Miner alternatives at https://cybersectools.com/alternatives/param-miner
Param Miner is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
OWASP OWTF is a penetration testing framework focused on efficiency and alignment with security standards.
A tool for embedding XXE/XML exploits into different filetypes
Pacu is an open-source AWS exploitation framework designed for offensive security testing against cloud environments through modular attack capabilities.
Autonomous AI pentest platform delivering audit-grade reports in hours.
A brute force parameter discovery tool for identifying hidden GET and POST parameters in web applications during security assessments.
A Python tool that mines URLs from web archives to assist security researchers in discovering potential attack surfaces for bug hunting and vulnerability assessment.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
