Overview
ParamHound — hidden HTTP parameter discovery extension for authorized security testing (Manifest V3).
ParamHound finds hidden HTTP request parameters and headers for web security testing. HOW IT WORKS - Capture a request (the page URL and its API calls), or type one in manually. - Active fuzzing: it batches thousands of known parameter names into requests and bisects the ones that change the response, then confirms each with repeat requests against a multi-sample baseline to filter out response noise. - Page + JavaScript analysis: it also reads the page and its same-origin scripts and lists the parameter names the site actually references — real leads, not guesses. - Detection signals: value reflection, status/redirect changes, new JSON keys, and structural changes, calibrated per target so dynamic pages don't false-positive. - Rate-limit aware: HTTP 429/503 responses are recognised as rate limiting, backed off, and never mistaken for a parameter effect. FEATURES - Query, form-body, JSON-body, and header injection points - Fast batched scanning with bisection, or a thorough one-request-per-parameter mode - Aggressive / Balanced / Strict sensitivity - Per-tab results, live diagnostics, and JSON / CSV / Markdown export - Bundled wordlists (~6,400 parameters, ~1,200 headers) plus your own imports - Rate limiting, per-job request caps, and scope controls PRIVACY Everything runs locally in your browser. ParamHound sends requests only to the target you choose to test, using your existing session. It has no servers, no analytics, and transmits no data anywhere.
Details
- Version0.1.0
- UpdatedJuly 28, 2026
- Offered byaswinkv0x0
- Size79.88KiB
- LanguagesEnglish
- Developer
Email
aswinkv0x0@gmail.com - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
