Starstruk Logo MarkStarstruk

v2.6.0

epi052/feroxbusterv2.6.0Mar 5, 2022by epi052

AI Summary

Adds data collection modes, Burp Suite integration, smart scanning, and an NLP module.

Key Highlights

  • Added `--collect-backups`, `--collect-extensions`, `--collect-words`, and `--dont-collect` flags.
  • Added Burp Suite integration with `--burp` and `--burp-replay` flags.
  • Added `--smart` and `--thorough` scanning modes.
  • Added NLP module with HTML-based TF-IDF implementation.

New Features

  • Data collection modes
  • Burp Suite integration
  • Smart and Thorough scanning modes
  • NLP module

Full Release Notes

## What's Changed
- Add `--no-state` option, filter queries from links, title-case headers by @godylockz in https://github.com/epi052/feroxbuster/pull/474
- added `--collect-extensions` and `--dont-collect`
- added `--collect-words`
- added `--collect-backups`
- added `--burp`
- added `--burp-replay`
- added `--smart`
- added `--thorough`
- added `--no-state`
- added `nlp` module with html-based TF-IDF implementation
- fixed bug in `--resume-from` where `ScanType::File` scans were erroneously kicked off as though they were `ScanType::Directory`
- fixed bug where some extracted requests may  have been requested with redirects allowed, regardless of runtime config
- fixed bug where the first request made with `--extract-links` was not async
- implemented workaround for bug when `--method` was `POST`, `PUT`, `PATCH` and `--data` was empty/not used (awaiting upstream for a real fix)
- query params and fragments are removed from extracted urls before being requested
- updated dependencies
- headers are now Title-Cased
- directory listing detection happens regardless of `--extract-links` usage, however the links found therein are only requested when `--extract-links` is used
- numerous code quality improvements

**Full Changelog**: https://github.com/epi052/feroxbuster/compare/v2.5.0...v2.6.0