v2.12.0

OpenBMB/MiniCPM-Vv2.12.0Sep 1, 2025by epi052

AI Summary

A comprehensive update adding response limiting, filtering, and convenience flags for the web scanner.

Key Highlights

  • Added response size limiting to prevent memory exhaustion
  • Implemented unique response filtering using SimHash
  • Added auto Content-Type headers for POST requests
  • Enhanced scan limit management

New Features

  • Response size limiting
  • Unique response filtering
  • Auto Content-Type headers
  • Dynamic scan limit management

Full Release Notes

# Feroxbuster v2.12.0 Release Summary

## 🚀 **New Features**

### **Response Size Limiting** (`--response-size-limit`)
- **Issue #1260**: Added new `--response-size-limit` flag to limit the size of response bodies read during scanning
- Helps prevent memory exhaustion when scanning applications with very large responses
- Default limit set to 4MB, configurable via command line and config file
- Responses that exceed the limit are marked as truncated but still processed for status codes and headers

### **Unique Response Filtering** (`--unique`)
- **Issue #1240/635**: Added new `--unique` flag to filter out duplicate responses using SimHash with Hamming distance analysis
- Helps reduce noise by showing only unique content, especially useful when scanning large applications with similar pages
- Uses advanced similarity detection to identify duplicate responses even when they're not identical

### **Auto Content-Type Headers** (`--data-json` and `--data-urlencoded`)
- **PR #1234**: Added new convenience flags for automatically setting Content-Type headers and POST method by @zar3bski
- `--data-json`: Automatically sets `Content-Type: application/json`, configures data payload, and sets method to POST
- `--data-urlencoded`: Automatically sets `Content-Type: application/x-www-form-urlencoded`, URL-encodes the payload, and sets method to POST  
- Both flags support reading data from files using `@filename` syntax (e.g., `--data-json @payload.json`)
- Simplifies common POST request scenarios by eliminating need to manually set headers and methods

### **Dynamic Scan Limit Management**
- **Issue #817**: Enhanced scan management menu with ability to view and modify scan limits in real-time
- **Issue #1254**: Added capability to increase scan limits through the interactive scan management menu
- Added "Waiting" status visibility for scans that are queued due to limits

## 🛠️ **Improvements**

### **Shell Completion Updates**
- **PR #1229**: Fixed Fish shell completion generation in build script by @zer0x64
- Corrected duplicate Zsh completion generation that was preventing Fish completions from being properly generated

### **Enhanced SSL Error Messaging**
- **Issue #1258**: Improved SSL error messages to provide more helpful debugging information
- Better error context and clearer explanations when SSL/TLS issues occur

### **Updated Link Discovery**
- **Issue #1077**: Fixed bug in link extractor functionality related to force recursion handling
- Updated LinkFinder regex patterns to latest version from upstream project

## 🔧 **Technical Changes**

### **Dependencies**
- Updated various dependencies to their latest versions for security and performance improvements

### **Code Quality**
- **PR #1247**: Fixed clippy linting warnings to enable compilation with `--deny warnings` by @karanabe

### **Configuration**
- Added `unique` option to configuration file example
- Added `response_size_limit` option to configuration file example
- Enhanced banner display to show unique filtering and response size limit status when enabled

## New Contributors
* @zer0x64 made their first contribution in https://github.com/epi052/feroxbuster/pull/1229
* @zar3bski made their first contribution in https://github.com/epi052/feroxbuster/pull/1234
* @karanabe made their first contribution in https://github.com/epi052/feroxbuster/pull/1245

---


**Full Changelog**: https://github.com/epi052/feroxbuster/compare/v2.11.0...v2.12.0