x8
Category: Web Application Security
Language: Rust
Type: Parameter & Header Discovery
📘 Definition & Purpose
x8 is an ultra-fast parameter discovery utility written in Rust, designed to find hidden query parameters and headers.
🧪 Core Mechanics
x8 is extremely fast and optimized for large wordlists. It parses headers, bodies, cookies, and HTTP variables using custom algorithms to identify differences in WAF behaviors and web server error codes.
🚀 Usage & Cheat Sheet
# Discover hidden parameters in GET requests
x8 -u "https://target.com/" -w parameters.txt
# Discover custom HTTP request headers (e.g. X-Forwarded-For)
x8 -u "https://target.com/" -w headers.txt --proto headers
# Check parameters with custom injection string
x8 -u "https://target.com/index.php" -w parameters.txt -X POST --param-template "test%s"
🔗 Integration
This tool is utilized across the: