2.7.0
epi052/feroxbuster2.7.0Apr 15, 2022by epi052
AI Summary
Overhauls status code filtering and introduces `--force-recursion` flag.
Key Highlights
- Overhauled `--filter-status` and `--status-codes` to be mutually exclusive.
- Introduced `--force-recursion` to ignore typical recursion logic.
- Updated default Windows wordlist path to look in the current directory.
Breaking Changes
- `--filter-status` and `--status-codes` are now mutually exclusive options
New Features
- Overhauled status code filtering
- `--force-recursion` flag
Full Release Notes
## What's Changed * 535 status code filter overhaul by @epi052 in https://github.com/epi052/feroxbuster/pull/536 For a more in-depth explanation of how status code filtering has changed, please see [the docs](https://epi052.github.io/feroxbuster-docs/docs/examples/filter-status/). Here are the cliff notes: - `--filter-status` and `--status-codes` are now mutually exclusive options - `--status-codes` works the same way it always has: by providing an allow-list for status codes. Any status code not included in `--status-codes` will be filtered out - If a value is given to `--filter-status`, that status code will be filtered out, while all other status codes are allowed to proceed Additionally, there is a new flag, `--force-recursion`. This flag tells feroxbuster to ignore its typical recursion logic in favor of recursing into any ‘found’ asset. A ‘found’ asset is an endpoint that was not filtered out by other scan settings (i.e. `–filter-status` or similar). More info available [here](https://epi052.github.io/feroxbuster-docs/docs/examples/force_recursion/). Finally, the default path to the wordlist on windows has been updated to look in the current directory: `.\SecLists\Discovery\Web-Content\raft-medium-directories.txt` :tada: Special thanks to @0xdf223 and @ThisLimn0 :tada: **Full Changelog**: https://github.com/epi052/feroxbuster/compare/v2.6.4...2.7.0