ParamSpider

MCP tool from Hexstrike Ai by 0x4m4

Parameter mining from web archives

How to use it

ParamSpider is exposed by the Hexstrike Ai MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the ParamSpider tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Hexstrike Ai

$pip install -r requirements.txt

FULL HEXSTRIKE AI LISTING

Other tools in Hexstrike Ai (39)

Network discovery using ARP requests

Comprehensive automated reconnaissance with 35+ parameters

AWS network visualization and security analysis

Cloud security scanning and monitoring

Online hash lookup integration

DNS information gathering and subdomain brute forcing

SMB enumeration with user, group, and share discovery

Advanced SMB enumeration with enhanced logging

Windows Remote Management shell with PowerShell integration

Fast web fuzzer with advanced filtering and parameter discovery

Google Cloud Platform command line with security tools

GraphQL-Voyager

GraphQL schema exploration and introspection testing

Hash-Identifier

Hash type identification tool

Advanced hash algorithm identifier with confidence scoring

Fast HTTP probing and technology detection

JSON Web Token testing with algorithm confusion

CIS Kubernetes benchmark checker with remediation

Kubernetes penetration testing with active/passive modes

Libc identification and offset lookup tool

Metasploit payload generator with advanced encoding

NetBIOS name scanning and enumeration

Network service exploitation framework (formerly CrackMapExec)

NoSQL injection testing for MongoDB, CouchDB, etc.

Find one-shot RCE gadgets in libc

File recovery software with advanced carving capabilities

Query string parameter replacement for systematic testing

Advanced reverse engineering framework with comprehensive analysis

ROP/JOP gadget finder with advanced search capabilities

RPC enumeration and null session testing

SMB share enumeration and exploitation

Advanced automatic SQL injection testing with tamper scripts

SSL/TLS cipher suite enumeration

Fast and comprehensive SSL/TLS configuration analyzer

Disk partition recovery and repair tool

SSL/TLS configuration testing and vulnerability assessment

Email and subdomain harvesting from multiple sources

Next-generation memory forensics with enhanced analysis

Web application firewall fingerprinting

WordPress security scanner with vulnerability database