Discover Hidden HTTP Parameters

Arjun

Arjun: https://github.com/s0md3v/Arjun

arjun -u https://testphp.vulnweb.com/listproducts.php

Burpsuite: Param Mainer

ParamSpider

https://github.com/devanshbatham/ParamSpider