2.7.0

epi052/feroxbuster2.7.0Apr 15, 2022by epi052

AI Summary

Overhauls status code filtering and introduces `--force-recursion` flag.

Key Highlights

  • Overhauled `--filter-status` and `--status-codes` to be mutually exclusive.
  • Introduced `--force-recursion` to ignore typical recursion logic.
  • Updated default Windows wordlist path to look in the current directory.

Breaking Changes

  • `--filter-status` and `--status-codes` are now mutually exclusive options

New Features

  • Overhauled status code filtering
  • `--force-recursion` flag

Full Release Notes

## What's Changed
* 535 status code filter overhaul by @epi052 in https://github.com/epi052/feroxbuster/pull/536

For a more in-depth explanation of how status code filtering has changed, please see [the docs](https://epi052.github.io/feroxbuster-docs/docs/examples/filter-status/). Here are the cliff notes: 

- `--filter-status` and `--status-codes` are now mutually exclusive options
- `--status-codes` works the same way it always has: by providing an allow-list for status codes. Any status code not included in `--status-codes` will be filtered out
- If a value is given to `--filter-status`, that status code will be filtered out, while all other status codes are allowed to proceed

Additionally, there is a new flag, `--force-recursion`. This flag tells feroxbuster to ignore its typical recursion logic in favor of recursing into any ‘found’ asset. A ‘found’ asset is an endpoint that was not filtered out by other scan settings (i.e. `–filter-status` or similar).  More info available [here](https://epi052.github.io/feroxbuster-docs/docs/examples/force_recursion/).

Finally, the default path to the wordlist on windows has been updated to look in the current directory: `.\SecLists\Discovery\Web-Content\raft-medium-directories.txt`

:tada: Special thanks to @0xdf223 and @ThisLimn0 :tada: 

**Full Changelog**: https://github.com/epi052/feroxbuster/compare/v2.6.4...2.7.0