使用 Homebrew, apt, Nix 安装 arjun

项目链接

• 主页

命令和别名

• arjun

项目历史

Arjun is maintained in the s0md3v/Arjun GitHub repository and distributed as a Python CLI. The official README positions it around practical web testing tasks: GET, POST, JSON, and XML request probing; timeout and rate-limit handling; output to Burp Suite, text, or JSON; and target import from files, Burp, or raw HTTP requests.

The project release stream visible from the official GitHub releases shows 1.x releases by 2018-2019, a 2.0 beta in 2020, and continued 2.2.x releases through 2024. The README's installation recommendation is pipx, with pip as a fallback for older Python environments.

采用历史

The supplied package facts show Arjun packaged for Homebrew, Debian, Ubuntu, and Nix, which is typical for Python security tooling that becomes useful enough to install from OS and developer package managers rather than only from source.

Arjun's adoption niche is bug bounty, recon, and API testing workflows where hidden or undocumented parameters can change endpoint behavior. Its README credits Common Crawl, SecLists, Param Miner, and data-payloads as sources or relatives for the parameter wordlists, tying it to the broader web-security wordlist ecosystem.

使用方式

The executable is arjun. Users normally point it at one URL or a list of targets, choose request methods and headers as needed, and export discovered parameters for later manual testing or Burp-centered workflows.

The official README does not document a persistent config file or credential store. Operationally, options are passed on the command line or through imported request/target files.

为什么软件包爱好者会关心

Arjun is package-nerdy because it turns a common recon step into a repeatable CLI primitive. It is small, Python-packaged, and easy to drop into Homebrew, distro packages, Nix shells, or security-tool images.

Its value is not a framework or scanner platform; it is the narrow, automatable act of parameter discovery. That narrowness is why it fits well beside tools like Burp, SecLists, Param Miner, ffuf, httpx, and other recon CLIs.

时间线

• 2018: Official GitHub releases show Arjun 1.1.
• 2019: Official releases show 1.2-beta through 1.6.
• 2020: Official releases show 2.0-beta.
• 2024: Official releases show 2.2.x releases through 2.2.7.

Related projects

• Related projects and data sources named by the README include SecLists, PortSwigger Param Miner, Common Crawl-derived wordlists, Burp Suite, and data-payloads.
• In workflows it commonly sits near HTTP probing, fuzzing, and recon tools rather than full vulnerability scanners.

来源

• https://github.com/s0md3v/Arjun/releases
• https://raw.githubusercontent.com/s0md3v/Arjun/master/README.md
• input.source_facts.package-manager