v2.12.0
firecracker-microvm/firecrackerv2.12.0Sep 1, 2025by epi052
AI Summary
This release introduces response size limiting and unique response filtering to improve scanning efficiency and prevent memory exhaustion. It also adds convenience flags for JSON and URL-encoded POST requests, alongside enhancements to the interactive scan management menu and bug fixes.
Key Highlights
- Added `--response-size-limit` to prevent memory exhaustion during large response scanning
- Added `--unique` flag using SimHash to filter duplicate responses and reduce noise
- Added `--data-json` and `--data-urlencoded` for automatic Content-Type headers
- Enhanced interactive scan management with real-time limit modification
- Fixed Fish shell completion generation in build script
New Features
- Response size limiting via `--response-size-limit` flag
- Unique response filtering using SimHash
- Auto Content-Type headers for `--data-json` and `--data-urlencoded`
- Dynamic scan limit management in interactive menu
- Visibility of 'Waiting' status for queued scans
Full Release Notes
# Feroxbuster v2.12.0 Release Summary ## 🚀 **New Features** ### **Response Size Limiting** (`--response-size-limit`) - **Issue #1260**: Added new `--response-size-limit` flag to limit the size of response bodies read during scanning - Helps prevent memory exhaustion when scanning applications with very large responses - Default limit set to 4MB, configurable via command line and config file - Responses that exceed the limit are marked as truncated but still processed for status codes and headers ### **Unique Response Filtering** (`--unique`) - **Issue #1240/635**: Added new `--unique` flag to filter out duplicate responses using SimHash with Hamming distance analysis - Helps reduce noise by showing only unique content, especially useful when scanning large applications with similar pages - Uses advanced similarity detection to identify duplicate responses even when they're not identical ### **Auto Content-Type Headers** (`--data-json` and `--data-urlencoded`) - **PR #1234**: Added new convenience flags for automatically setting Content-Type headers and POST method by @zar3bski - `--data-json`: Automatically sets `Content-Type: application/json`, configures data payload, and sets method to POST - `--data-urlencoded`: Automatically sets `Content-Type: application/x-www-form-urlencoded`, URL-encodes the payload, and sets method to POST - Both flags support reading data from files using `@filename` syntax (e.g., `--data-json @payload.json`) - Simplifies common POST request scenarios by eliminating need to manually set headers and methods ### **Dynamic Scan Limit Management** - **Issue #817**: Enhanced scan management menu with ability to view and modify scan limits in real-time - **Issue #1254**: Added capability to increase scan limits through the interactive scan management menu - Added "Waiting" status visibility for scans that are queued due to limits ## 🛠️ **Improvements** ### **Shell Completion Updates** - **PR #1229**: Fixed Fish shell completion generation in build script by @zer0x64 - Corrected duplicate Zsh completion generation that was preventing Fish completions from being properly generated ### **Enhanced SSL Error Messaging** - **Issue #1258**: Improved SSL error messages to provide more helpful debugging information - Better error context and clearer explanations when SSL/TLS issues occur ### **Updated Link Discovery** - **Issue #1077**: Fixed bug in link extractor functionality related to force recursion handling - Updated LinkFinder regex patterns to latest version from upstream project ## 🔧 **Technical Changes** ### **Dependencies** - Updated various dependencies to their latest versions for security and performance improvements ### **Code Quality** - **PR #1247**: Fixed clippy linting warnings to enable compilation with `--deny warnings` by @karanabe ### **Configuration** - Added `unique` option to configuration file example - Added `response_size_limit` option to configuration file example - Enhanced banner display to show unique filtering and response size limit status when enabled ## New Contributors * @zer0x64 made their first contribution in https://github.com/epi052/feroxbuster/pull/1229 * @zar3bski made their first contribution in https://github.com/epi052/feroxbuster/pull/1234 * @karanabe made their first contribution in https://github.com/epi052/feroxbuster/pull/1245 --- **Full Changelog**: https://github.com/epi052/feroxbuster/compare/v2.11.0...v2.12.0