v2.11.0

What's Changed

• add --scan-dir-listings by @epi052 in #1192
• add --request-file by @epi052 in #1192
• add --protocol by @epi052 in #1192
• add --limit-bars by @epi052 in #1192

Brief descriptions

• --request-file and --protocol - read in a raw http request file, from burp or similar
• --scan-dir-listings - force recursion into folders where directory listing is enabled
• --limit-bars - cap the number of progress bars displayed

Documentation

• --request-file and --protocol
• --scan-dir-listings
• --limit-bars

Special thanks to @Raymond-JV, @Tib3rius, @libklein, and @L1-0 for their suggestions and support 🎉

Full Changelog: v2.10.4...v2.11.0

v2.10.4

What's Changed

• --filter-regex now looks at headers in addition to response body by @epi052 in #1142
• clarified wording for headers in ferox-config.toml by @JulianGR in #1152
• added winget releaser workflow by @sitiom in #1155
• scan management menu now shows the estimated time left to scan by @epi052 in #1142
• made --cookies parsing more robust by @epi052 in #1142
• added ARM build for mac (aarch64-macos) to releases by @epi052 in #1142
• fixed an issue where estimated time to complete would show 0s before the scan was finished by @epi052 in #1142

New Contributors

• @JulianGR made their first contribution in #1152
• @sitiom made their first contribution in #1155

Special thanks 🙏

The following folks submitted bugs, PRs, and feature requests (in no particular order). They're the real MVPs.

• @JulianGR
• @L1-0
• @sitiom
• @wikamp-collaborator
• @sa7mon
• @swordfish0x0

Full Changelog: v2.10.3...v2.10.4

v2.10.3

What's Changed

• 1105 - improve json logs for post processing by @epi052 in #1114
• 1097 - included configuration field in state file by @epi052 in #1114
• 1118 - using --data implies POST HTTP verb by @epi052 in #1114
• 1122 - fixed mishandling of whitespace for supplied request headers by @epi052 in #1114

Full Changelog: v2.10.2...v2.10.3

v2.10.2

What's Changed

• removed scan target headers from feroxbuster-update check by @epi052 in #1033
• --collect-backups accepts custom backup extension list by @epi052 in #1035
• fixed issue where --silent included too much info on found dir by @epi052 in #1067
• --parallel time limit enforced on individual directories instead of main thread by @epi052 in #1072
• query fontconfig to determine if Noto Color Emoji is installed by @tritoke in #1083
• updated upstream library that was causing tokio-runtime-worker panics; they're correctly reported as Err from the library now
• re-added .deb install method to releases
• fixed issue where early redirect loop would cause ferox to hang indefinitely

New Contributors

• @tritoke made their first contribution in #1083

Full Changelog: v2.10.1...v2.10.2

v2.10.1

What's Changed

• fixed scan menu range issue by @epi052 in #936
• enable reading extensions from file by @andreademurtas in #976
• fixed collect backups filtering by @epi052 in #1016
• added http/2 support by @epi052 in #1020
• allowed --json in conjunction with --silent by @epi052 in #1022

New Contributors

• @andreademurtas made their first contribution in #976

Full Changelog: v2.10.0...v2.10.1

v2.10.0

What's Changed

• Adds server and client certificate management; enables mTLS by @lavafroth in #892
  • --server-certs
  • --client-cert
  • --client-key

New Contributors

• @lavafroth made their first contribution in #892 🎉

Full Changelog: v2.9.5...v2.10.0

v2.9.5

What's Changed

• 878 support raw urls by @epi052 in #884

special thanks to @aroly for reporting the issue, @lavafroth for the workaround, and @aancw for furthering the discussion! 🎉

Full Changelog: v2.9.4...v2.9.5

v2.9.4

• reduced memory usage overall
• improved speed during link extraction
• updated dependencies. most significantly, indicatif, which hasn't been updated for well over a year (purposely postponed)
• added optional install path to install-nix.sh

What's Changed

• random improvements by @epi052 in #877
• docs: add DrorDvash as a contributor for bug by @allcontributors in #879

Full Changelog: v2.9.3...v2.9.4

v2.9.3

What's Changed

• added extensions and status codes into auto filtering decision calculus by @epi052 in #869

Special thanks to @0xdf223 for letting me know about the shortcoming 🥳

Full Changelog: v2.9.2...v2.9.3

v2.9.2

What's Changed

• changed default value for --extract-links to true => added --dont-extract-links to turn off the new default behavior by @epi052 in #834
• can load a wordlist from its url over http/https by @epi052 in #834
• updated README with alternative installation methods for brew and chocolatey by @aancw in #824
• fixed divide by zero error by @epi052 in #834
• added check for forced recursion when directory listing detected by @epi052 in #834

Special thanks to @aancw for the code, @acut3 for the bug report, and @xaeroborg for the nice quality of life idea 🎉

Full Changelog: v2.9.1...v2.9.2