v2.2.0

epi052/feroxbusterv2.2.0Feb 18, 2021by epi052

AI Summary

Introduces parallel scanning capabilities to handle large numbers of targets simultaneously using child processes, alongside dependency updates.

Key Highlights

Added `--parallel` option for multi-target scanning
Bumped tokio to version 1.2.0
Spawns a child process per target passed over stdin

New Features

Parallel scanning capability (`--parallel`)

Full Release Notes

- added `--parallel` option
- bumped tokio to version 1.2.0
- bumped serde_json to version 1.0.62

special thanks to [Nicolas Krassas (@Dinosn)](https://twitter.com/Dinosn) for the suggestion :tada: 

---

Version 2.2.0 introduces the `--parallel` option.  If you're one of those people who use `feroxbuster` to scan 100s of hosts at a time, this is the option for you! `--parallel` spawns a child process per target passed in over stdin (recursive directories are still async within each child).

The number of parallel scans is limited to whatever you pass to `--parallel`. When one child finishes its scan, the next child will be spawned.  

Unfortunately, using `--parallel` limits terminal output such that only discovered URLs are shown. No amount of `-v`'s will help you here. I imagine this isn't too big of a deal, as folks that need `--parallel` probably aren't sitting there watching the output... 🙃

Example Command:
```https://github.com/epi052/feroxbuster/releases/edit/untagged-58b798b7467f3515b0c0#
cat large-target-list | ./feroxbuster --stdin --parallel 10 --extract-links --auto-bail
```

Resuling Process List (illustrative):
```
\_ target/debug/feroxbuster --stdin --parallel 10
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-one
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-two
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-three
    \_ ...
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-ten
```