v2.16.0

tobychui/zoraxyv2.16.0Aug 22, 2026by ehsandeep

Upgrading?

AI Summary

Subfinder v2.16.0 introduces a passive malware scan source and fixes critical pagination and security issues across multiple sub-scrapers.

Key Highlights

  • Fixed pagination to honor `-max-results` across all sources
  • Fixed domain extraction to match targets literally and reject partial hosts
  • Added `scanmalware` as a passive source
  • Fixed usage of deprecated `Dial` method in subscraping

New Features

  • scanmalware passive source

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at main -->

## What's Changed

* feat(sources): honor -max-results across paginating sources by @Gerijacki in https://github.com/projectdiscovery/subfinder/pull/1810
* fix(extractor): match the target domain literally and reject partial hosts by @Gerijacki in https://github.com/projectdiscovery/subfinder/pull/1811
* fix(subscraping): cap untrusted source response bodies with a size limit by @adamsjack711-ux in https://github.com/projectdiscovery/subfinder/pull/1809
* fix(subscraping): use DialContext instead of the deprecated Dial by @jonaslejon in https://github.com/projectdiscovery/subfinder/pull/1835
* feat: add scanmalware passive source by @jonaslejon in https://github.com/projectdiscovery/subfinder/pull/1834
* fix(crtsh): set statement_timeout via SQL query to avoid PgBouncer handshake rejection (#1828) by @gcoinstash-cmd in https://github.com/projectdiscovery/subfinder/pull/1832

## New Contributors
* @J12934 made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1823
* @adamsjack711-ux made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1809
* @gcoinstash-cmd made their first contribution in https://github.com/projectdiscovery/subfinder/pull/1832

**Full Changelog**: https://github.com/projectdiscovery/subfinder/compare/v2.15.0...v2.16.0

Related Repositories