Arjun is a python script for finding hidden GET & POST parameters. - View it on GitHub