v1.12.2

epi052/feroxbusterv1.12.2Jan 15, 2021by epi052

AI Summary

Fixes a URL construction bug where words starting with two or more forward slashes (`//`) resulted in malformed URLs.

Key Highlights

  • Fixed URL parsing issue for words starting with 2+ slashes
  • Normalization of leading slashes in wordlists

New Features

  • Fixed URL parsing for double-slash words

Full Release Notes

- fixed url parsing issue when word starts with 2 or more `/`'s 

:partying_face: Special thanks to @Sicks3c for the report that ID'd the issue :partying_face: 

Fixed an issue where a word from the wordlist, that starts with 2 or more `/`'s, would fail to properly join with the given domain. When a wordlist contains words that begin with 2 forward slashes, i.e. `//1_40_0/static/js`, the library used for making requests joins the word onto the base url in a surprising way:
```
base_url: https://localhost/ 
word: //1_40_0/static/js
result: https://1_40_0/static/js
```

This is due to the fact that `//...` is a valid url. 

Words with two or more `/`'s will be normalized down to 0 prepended `/`'s to allow for a proper join.