1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
# Changelog
Currently working...
---------
- Fixed critical bugs from v0.4.1 (IMPORTANT)
- Exclude responses by redirects
- URLs from STDIN
- Fixed the CSV Injection vulnerability (https://www.exploit-db.com/exploits/49370)
- Raw request supported
- Can setup the default URL scheme (will be used when there is no scheme in the URL)
- Option to skip target by specified status codes
- Added max-runtime option
v0.4.1 (2020.12.8)
---------
- Faster
- Allow to brute force through a CIDR notation
- Exclude responses by human readable sizes
- Provide headers from a file
- Match/filter status codes by ranges
- Detect 429 response status code
- Support SOCKS proxy
- XML, Markdown and CSV report formats
- Capital wordlist format
- Option to replay proxy with found paths
- Option to remove all extensions in the wordlist
- Option to exit whenever an error occurs
- Option to disable colored output
- Debug mode
- Multiple bugfixes
---------
0.4.0 - 2020.09.27
---------
- Exclude extensions argument added
- No dot extensions option
- Support HTTP request data
- Added minimal response length and maximal response length arguments
- Added include status codes and exclude status codes arguments
- Added --clean-view option
- Added option to print the full URL in the output
- Added Prefixes and Suffixes arguments
- Multiple bugfixes
---------
0.3.9 - 2019.11.26
---------
- Added default extensions argument (-E).
- Added suppress empty responses.
- Recursion max depth.
- Exclude responses with text and regexes.
- Multiple fixes.
---------
0.3.8 - 2017.07.25
---------
- Delay argument added.
- Request by hostname switch added.
- Suppress empty switch added.
- Added Force Extensions switch.
- Multiple bugfixes.
---------
0.3.7 - 2016.08.22
---------
- Force extensions switch added
---------
0.3.6 - 2016.02.14
---------
- Bugfixes
---------
0.3.5 - 2016.01.29
---------
- Improved heuristic
- Replaced urllib3 for requests
- Error logs
- Batch reports
- User agent randomization
- bugfixes
---------
0.3.0 - 2015.02.05
---------
- Fixed issue3
- Fixed timeout exception
- Ported to Python3
- Other bugfixes
---------
0.2.7 - 2014.11.21
---------
- Added Url List feature (-l)
- Changed output
- Minor Fixes
---------
0.2.6 - 2014.9.12
---------
- Fixed bug when dictionary size is greater than threads count
- Fixed URL encoding bug
---------
0.2.5 - 2014.9.2
---------
- Shows Content-Length in output and reports
- Added default.conf file (for setting defaults)
- Report auto save feature added.
---------
- 0.2.4 - 2014.7.17 Added Windows support, --scan-subdir|--scan-subdirs argument added, --exclude-subdir|--exclude-subdirs added, --header argument added, dirbuster dictionaries added, fixed some concurrency bugs, MVC refactoring
- 0.2.3 - 2014.7.7 Fixed some bugs, minor refactorings, exclude status switch, "pause/next directory" feature, changed help structure, expaded default dictionary
- 0.2.2 - 2014.7.2 Fixed some bugs, showing percentage of tested paths and added report generation feature
- 0.2.1 - 2014.5.1 Fixed some bugs and added recursive option
- 0.2.0 - 2014.1.31 Initial public release
|