The Future of Data Analysis: Unraveling Hidden Parameters with Rust's Revolutionary Suite

x8 is a powerful tool written in Rust that assists in the identification of hidden parameters, which could potentially be vulnerable or reveal interesting functionality that might be overlooked by other testers. The tool ensures high accuracy by employing line-by-line comparison of pages, comparison of response codes, and reflections.

Features:

1. Fast: x8 is designed to be efficient and deliver quick results.
2. Flexible Request Configuration: The tool offers flexible request configuration through the use of templates and injection points, allowing customization according to specific requirements.
3. Scalability: x8 is highly scalable and capable of checking thousands of URLs per run, making it suitable for large-scale testing.
4. Enhanced Accuracy: x8 provides higher accuracy compared to similar tools, especially in challenging scenarios, ensuring that hidden parameters are effectively discovered.
5. Non-Random Parameter Detection: The tool is capable of identifying parameters with non-random values, such as "admin=true," which may expose critical functionality.
6. Customizability: x8 is highly configurable and provides a wide range of customizable options to adapt to different testing scenarios.
7. Raw Request Capabilities: By modifying external libraries, x8 achieves almost raw requests, allowing for more in-depth analysis.

Examples:

1. Check Parameters in Query:

arduino

Copy code
x8 -u "https://example.com/" -w <wordlist>         

1. This command checks parameters in the query of the provided URL using default parameters.
2. Send Parameters via Body:

arduino

Copy code
x8 -u "https://example.com/" -X POST -w <wordlist> 
json

Copy code
x8 -u "https://example.com/" -X POST -b '{"x":{%s}}' -w <wordlist>         

1. These commands send parameters via the request body. The second command demonstrates the usage of a custom body template where %s will be replaced with different parameters.
2. Check Multiple URLs in Parallel:

arduino

Copy code
x8 -u "https://example.com/" "https://4rt.one/" -W0         

1. This command checks multiple URLs in parallel, specifying the URLs as separate arguments.
2. Custom Template:

perl

Copy code
x8 -u "https://example.com/" --param-template "user[%k]=%v" -w <wordlist>         

1. Using a custom template, this command configures the request parameters to be in the format of /?user[a]=hg2s4&user[b]=a34fa&...
2. Percent Encoding:

lua

Copy code
x8 -u "https://example.com" --encode -w <wordlist>         

1. This command demonstrates percent encoding of parameters to handle cases where encoding is required.
2. Search for Headers:

lua

Copy code
x8 -u "https://example.com" --headers -w <wordlist>         

1. This command searches for parameters within headers.
2. Search for Header Values:

perl

Copy code
x8 -u "https://example.com" -H "Cookie: %s" -w <wordlist>         

1. This command specifically targets the "Cookie" header to search for different values.

For more details and access to the tool, you can visit the GitHub repository by Sh1Yo: https://github.com/Sh1Yo or directly access the tool at https://github.com/Sh1Yo/x8.