v1.1.0

epi052/feroxbusterv1.1.0Oct 22, 2020by epi052

AI Summary

Users can now extract links from response bodies to discover additional endpoints for recursive scanning, transforming the tool into a hybrid scanner that looks for both linked and unlinked content.

Key Highlights

Added `--extract-links` feature
Scans links found in HTML/JS bodies
Hybrid scanning capability
Automatically adds discovered links to recursion

New Features

Link extraction from response bodies
Hybrid scanning mode

Full Release Notes

- Added ability to extract links from response bodies

---

### Extract Links Feature Description

Search through the body of valid responses (html, javascript, etc...) for additional endpoints to scan. This turns
`feroxbuster` into a hybrid that looks for both linked and unlinked content. 

Example request/response with `--extract-links` enabled:
- Make request to `http://example.com/index.html`
- Receive, and read in, the `body` of the response
- Search the `body` for absolute and relative links (i.e. `homepage/assets/img/icons/handshake.svg`)
- Add the following directories for recursive scanning:
    - `http://example.com/homepage`
    - `http://example.com/homepage/assets`
    - `http://example.com/homepage/assets/img`
    - `http://example.com/homepage/assets/img/icons`
- Make a single request to `http://example.com/homepage/assets/img/icons/handshake.svg`

```
./feroxbuster -u http://127.1 --extract-links
```