Commit Graph

Select branches

Hide Pull Requests

main

#1

#26

#27

#3

#38

#4

#41

#42

#46

#48

#49

#50

#51

#52

#54

#58

#59

#60

#7

#8

1.10.0

1.10.1

1.10.2

1.10.3

1.3.4

1.3.5

1.3.6

1.4.0

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.5.0

1.5.1

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.6.0

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.7.0

1.7.1

1.7.2

1.7.3

1.7.4

1.8.0

1.8.1

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.9.0

1.9.1

1.9.2

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.1.0

2.2.0

2.2.1

2.3.0

2.3.1

2.3.2

2.4.0

2.4.1

2.5.0

2.5.1

2.6.0

2.6.1

2.6.2

2.6.3

2.7.0

2.8.0

2.8.1

2.8.2

2.8.3

2.8.4

Mono Color

• e1aea16c6e Incremented version string main 2.8.4 Tony West 2026-10-29 21:26:40 -04:00
• e5796ed66a Merge pull request #60 from BishopFox/dependabot/go_modules/github.com/getkin/kin-openapi-0.149.0 Tony West 2026-10-29 21:25:55 -04:00
• ef5822c230 chore(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.149.0 dependabot[bot] 2026-10-19 17:55:21 +00:00
• 9111e90a20 Updated release section to include mention of joro Tony West 2026-10-02 16:56:27 -04:00
• 04e0b22c47 Added release section to enable draft releases 2.8.3 Tony West 2026-10-02 16:49:02 -04:00
• 3c8a2d3c3a Incremented version string Tony West 2026-10-02 16:44:16 -04:00
• 64470d1995 fix: Degrade instead of dying on multiple/relative servers; remove package die() Tony West 2026-10-02 00:06:21 -04:00
• 4e9ae71caa fix: Derive command mode from cobra instead of os.Args[1] Tony West 2026-10-01 23:39:31 -04:00
• 85c4a44421 fix: Read per-operation security requirements, ignored until now Tony West 2026-10-01 23:02:59 -04:00
• 023e210b75 fix: Apply bearer auth from spec-compliant http/bearer schemes Tony West 2026-10-01 20:53:08 -04:00
• 5f83f1cb26 fix: Read Swagger 2.0 securityDefinitions and apply apiKey query params Tony West 2026-10-01 20:41:21 -04:00
• 6d262a369d fix: Keep all declared request body content types instead of last-wins Tony West 2026-10-01 20:29:13 -04:00
• 97eab8c4ba Updated documentation Tony West 2026-09-29 18:16:03 -04:00
• 6c7ee7d7da fix: Send declared request bodies on every method, not just POST Tony West 2026-09-29 18:15:57 -04:00
• f2b722ca55 fix: Send in:header, in:cookie, and in:formData parameters, not just render them in curl Tony West 2026-09-29 17:34:12 -04:00
• b0a281ccf1 Updated documentation Tony West 2026-09-29 16:58:39 -04:00
• c9f4472553 fix: Escape parameter values in URLs and generated curl commands Tony West 2026-09-29 16:58:32 -04:00
• 001f8f16b1 fix: Scope the schema cycle guard to the current ref path so sibling expand Tony West 2026-09-29 14:50:45 -04:00
• 31aa3b3f2f fix: Merge allOf subschemas into the schema node instead of replacing it Tony West 2026-09-29 14:32:20 -04:00
• 186841c2ba fix: Omit the API title and description from output when -q is used Tony West 2026-09-29 13:47:59 -04:00
• 7db065923a fix: Honor lowercase -H keys and never send an empty parameter value Tony West 2026-09-29 12:46:21 -04:00
• 4f256efca6 Incremented version string 2.8.2 Tony West 2026-09-11 21:44:23 -04:00
• 48c4d83f54 fix: Moved remaining diagnostic output to stderr so stdout stays pipeable Tony West 2026-09-11 21:44:15 -04:00
• 365f68696f Merge pull request #59 from emilloc/fix/auth-stderr Tony West 2026-09-11 21:36:58 -04:00
• fbf484c3a1 fix: send authentication diagnostics to stderr rootkid 2026-09-10 18:56:14 -06:00
• bc708d69f8 Incremented version string 2.8.1 Tony West 2026-08-24 17:34:11 -04:00
• 56346e759e Merge pull request #58 from BishopFox/dependabot/go_modules/github.com/getkin/kin-openapi-0.144.0 Tony West 2026-08-24 17:33:38 -04:00
• a69b4dcae1 Bump github.com/getkin/kin-openapi from 0.132.0 to 0.144.0 dependabot[bot] 2026-08-19 17:26:47 +00:00
• 7d9fa54a58 Incremented version string 2.8.0 Tony West 2026-07-22 08:52:23 -04:00
• 09a1183e6f Added more discoverability features and basic WAF detection to the brute command Tony West 2026-07-22 08:52:05 -04:00
• 90e9c78d9a Incremented version string 2.7.0 Tony West 2026-07-09 11:30:07 -04:00
• 3f99ffb48c Added docker support for releases Tony West 2026-07-09 11:29:51 -04:00
• 331bb1a05c Incremented version string 2.6.3 Tony West 2026-05-13 19:31:55 -04:00
• 3c2a3b807d added fix to auto-extract JS-wrapped specs in automate/endpoints/prepare; fixed POST body leak, Content-Type carryover, and multipart boundary issues Tony West 2026-05-13 19:31:22 -04:00
• 7ef8abdb8e Incremented version string 2.6.2 Tony West 2026-05-13 14:47:17 -04:00
• f1f9e19422 Improved detection for JS specs wrapped in swaggerDoc/spec/openapi Tony West 2026-05-13 14:46:47 -04:00
• 0d6776b758 Incremented version string 2.6.1 Tony West 2026-03-24 16:00:16 -04:00
• 8f4e4a5d9f Fixes #55 Tony West 2026-03-24 16:00:07 -04:00
• 55baa79785 Incremented version string 2.6.0 Tony West 2026-03-20 11:37:19 -04:00
• 5bdafb64d8 Merge pull request #54 from bsysop/main Tony West 2026-03-20 11:35:58 -04:00
• 27b59354fc Adds --replay-proxy flag to replay matched requests through a separate proxy Guillermo Gregorio 2026-03-19 22:04:42 -03:00
• bee5088fcf Adds --force flag to bypass dangerous keyword checks Guillermo Gregorio 2026-03-13 14:50:57 -03:00
• 1eda960182 Fixed bug where custom headers were not sent with the brute command 2.5.1 Tony West 2026-03-13 00:13:54 -04:00
• e805a7d190 Incremented version string 2.5.0 Tony West 2026-02-27 22:11:10 -05:00
• 18b20ad476 Merge pull request #52 from aringo-bf/feature/ref-resolution-hardening Tony West 2026-02-27 22:10:01 -05:00
• 5115b3cba3 Apply suggestions from code review Tony West 2026-02-27 22:06:13 -05:00
• 942ad84c54 fix: reconcile merged ref-hardening changes with current logging helpers aringo-bf 2026-02-27 16:06:56 -06:00
• 878f7dcd39 fix: normalize server base paths for v3 parsing aringo-bf 2026-02-25 23:35:17 -06:00
• 275f426fc2 fix: extract path from absolute server URLs when -T flag is used aringo-bf 2026-02-25 23:21:00 -06:00
• 6d027a66ce fix: preserve basePath with -T flag and allow endpoints with relative URLs aringo-bf 2026-02-25 23:15:27 -06:00
• 703039dc75 fix: JSON curl quoting bug and relative server URL handling aringo-bf 2026-02-25 23:07:43 -06:00
• e2a94378bf fix: resolve 4 critical reference resolution bugs aringo-bf 2026-02-25 22:58:00 -06:00
• c9fa4f1257 fix: resolve all 5 auditor-reported bugs aringo-bf 2026-02-25 22:36:44 -06:00
• 90f0870bfb feat: comprehensive spec reference resolution improvements aringo-bf 2026-02-25 22:22:38 -06:00
• 122d9d0114 Fixed sorting to ensure output is consistent across runs 2.4.1 Tony West 2026-02-26 11:34:23 -05:00
• ac50c4da75 Fixed typo in usage example Tony West 2026-02-26 11:14:19 -05:00
• 6eea0f8a77 Improved output and removed logrus dependency 2.4.0 Tony West 2026-02-26 11:10:04 -05:00
• bdea5822e8 Incremented version string 2.3.2 Tony West 2026-02-26 10:34:50 -05:00
• 7bb228d81c Fixed infinite loop when encountering circular redirects Tony West 2026-02-26 10:18:37 -05:00
• 3258ca341f Fixed missing length check issue Tony West 2026-02-26 10:12:36 -05:00
• 58d4e91760 Fixed variable shadowing issue Tony West 2026-02-26 10:05:56 -05:00
• 1f5a946011 Converted status code logic to switch for readability Tony West 2026-02-26 10:02:32 -05:00
• 143fdfda1b Merge pull request #50 from aringo-bf/fix/httpbasic-segfault-and-quiet-flag 2.3.1 Tony West 2026-02-26 09:10:36 -05:00
• a33eef47f4 Fix HTTPBasic segfault and --quiet flag issues aringo-bf 2026-02-25 21:57:34 -06:00
• 4c466112ee Added custom date, email, and URL flags 2.3.0 Tony West 2026-02-03 17:10:52 -05:00
• 1195ff7fbf Incremented version string 2.2.1 Tony West 2026-02-03 13:09:21 -05:00
• bd3265d0a4 Improved handling of schema references Tony West 2026-02-03 13:08:53 -05:00
• d9fac2e9fe Updated version string 2.2.0 Tony West 2026-01-28 14:30:49 -05:00
• 10fe0376c0 Added the ability to customize the value used for testing identified string parameters Tony West 2026-01-28 14:30:25 -05:00
• baf4ef6c51 Added prioritized list of endpoints for the brute command and fixed base path handling for v2 2.1.0 Tony West 2026-01-15 18:37:16 -05:00
• 8e2e5fbebc Fixed improper handling of base path 2.0.4 Tony West 2026-01-15 10:54:22 -05:00
• a77f9f46bb Merge pull request #49 from altperfect/main Tony West 2026-01-15 10:37:28 -05:00
• 5554e2bd30 fix: prevent header-processing logic from dropping custom headers altperfect 2026-01-15 19:08:39 +05:00
• 09c460e768 Fixed issue that occurred when running against subdomains that contain '-d' in the subdomain name 2.0.3 Tony West 2025-11-25 16:36:39 -05:00
• ba45c6da26 Removed duplicate base path from output, minor changes to value type handling 2.0.2 Tony West 2025-11-21 17:17:50 -05:00
• 7417f9f917 Fixed bug where the base path was sometimes applied to the URL multiple times 2.0.1 Tony West 2025-09-19 17:24:33 -04:00
• 70a3d0b8c2 Updated the documentation 2.0.0 Tony West 2025-09-16 21:40:16 -04:00
• 77b11f40e6 Made some improvements for greater flexibility when encountering improperly defined API specifications Tony West 2025-09-16 21:40:04 -04:00
• fd602b9ca8 Fixed a bug that prevented use of header values containing a colon 1.10.3 Tony West 2025-04-15 13:24:23 -04:00
• 83d1b57aef Merge pull request #41 from altperfect/fix/enforce-single-content-type 1.10.2 Tony West 2025-03-18 16:06:26 -04:00
• 6f903a7f78 Merge pull request #42 from altperfect/feat/add-curl-command-to-verbose-output Tony West 2025-03-18 16:03:33 -04:00
• 0d59e6c34f Additional fix to output format check Tony West 2025-03-18 15:57:32 -04:00
• ceb99e4ddd Fixed insufficient output format check when displaying rate limit information Tony West 2025-03-18 15:54:55 -04:00
• 8310c8995d feat: add curl command in verbose output for 'automate' mode altperfect 2025-03-13 04:52:43 +05:00
• 017eb9af50 chore: bump version altperfect 2025-03-13 04:42:44 +05:00
• 025f3f18cf fix: refactor EnforceSingleContentType to not remove all custom headers except Content-Type altperfect 2025-03-13 04:24:03 +05:00
• 585100037a Updated documentation 1.10.1 Tony West 2024-11-15 16:30:15 -05:00
• f4b2634f42 Fixed improper handling of parameter values in the URL path Tony West 2024-11-15 16:28:29 -05:00
• 2e9da2e810 Merge pull request #38 from six2dez/patch-1 Tony West 2024-11-15 15:48:15 -05:00
• 0fd8b6e6ec Updated documentation 1.10.0 Tony West 2024-11-15 15:37:39 -05:00
• 8acc15aad1 Added rate limit functionality to the automate and brute commands Tony West 2024-11-15 15:37:24 -05:00
• 25d12a52e3 Added failsafe check for Swaggers with no security definitions six2dez 2024-11-08 10:20:21 +01:00
• a9f907e2f1 Modified convert command to enable saved output even when definition file is already v3 1.9.2 Tony West 2024-10-16 14:27:48 -04:00
• 3b3fed2c99 Merge branch 'main' of https://github.com/BishopFox/sj 1.9.1 Tony West 2024-10-09 18:07:14 -04:00
• 1571b14873 Updated version string Tony West 2024-10-09 18:06:38 -04:00
• 94e65fd96f Fixed missing check for 'formData' in the 'in' parameter object value Tony West 2024-10-09 18:06:26 -04:00
• 5274b1b0ab Fixed null pointer bug Tony West 2024-10-09 13:06:50 -04:00
• 49d6867ebf Now requires Go >= 1.21 Tony West 2024-10-04 18:44:51 -04:00
• 65d424c6a7 Added support for 'oneOf', 'anyOf', and 'allOf' schema keywords. 1.9.0 Tony West 2024-10-03 22:47:27 -04:00
• d7b34598d2 Fixed bug in verbose JSON output 1.8.6 Tony West 2024-10-03 14:52:47 -04:00