Skip to content

x8

Hidden parameter discovery and fuzzer

RustGitHub

Description

x8 is a hidden parameter discovery tool that finds valid parameters by analyzing how the server responds to different inputs. Built in Rust for speed and reliability.

Installation

BASH
cargo install x8

Basic Usage

BASH
# Discover parameters
x8 -u https://target.com -w params.txt

# With specific method
x8 -u https://target.com -w params.txt -m POST

Advanced Usage

BASH
# Custom wordlist
x8 -u https://target.com -w /usr/share/seclists/Discovery/Web-Content/burp-parameter-names.txt

# Set threads
x8 -u https://target.com -w params.txt -t 10

# With headers
x8 -u https://target.com -w params.txt -H "Cookie: session=abc"