108 Commits
Author SHA1 Message Date
Christian Mehlmauer ce7ba59e04 style fixes 2026-08-30 00:22:16 +02:00
Christian Mehlmauer 1726b88f50 fix some issues 2026-08-30 00:17:45 +02:00
Christian Mehlmauer 620ff792fb Fix formatting for body-output-dir flag
Signed-off-by: Christian Mehlmauer <[email protected]>
2025-12-03 00:26:23 +01:00
Christian Mehlmauer 768afdb5c8 Merge branch 'dev' into master
Signed-off-by: Christian Mehlmauer <[email protected]>
2025-12-03 00:18:09 +01:00
Atalata 5b7d7d9a1a Update method flag description
Signed-off-by: Atalata <[email protected]>
2025-12-02 20:12:05 +01:00
firefart ced860efb9 add body output dir 2025-09-28 16:47:22 +02:00
firefart 9a5cf49581 cleanup code 2025-09-28 15:03:27 +02:00
Mike Wajda acedf3cbef feat: add regex inverted 2025-09-18 15:21:04 -05:00
Mike Wajda 3d6dee6dbe feat: add the ability to use regex to inspect the response body 2025-09-15 15:45:07 -05:00
firefart 397c5fcfcb fix #239 2025-07-17 15:20:40 +02:00
firefart b6902dadc8 fix some code 2025-07-06 10:48:18 +02:00
Christian Mehlmauer ba0a2f7d28 Merge pull request #530 from 0xyy66/master
Add exclude-hostname-length flag to dynamically adjust exclude-length
2025-07-06 10:42:30 +02:00
0xyy66 2a727201cb Add exclude-hostname-length flag 2025-07-06 09:40:45 +02:00
firefart d3f51349a4 look mum, copilot wrote a new readme for us 2025-07-06 00:24:08 +02:00
Christian Mehlmauer 9d1224af15 fix some potential bugs 2025-06-30 12:44:20 +02:00
Christian Mehlmauer 1e7533c73d fix #567 2025-06-30 11:40:51 +02:00
Christian Mehlmauer 7bbf6f2868 update 2025-06-30 09:43:41 +02:00
firefart 3203caca01 remove show ips option 2025-05-22 10:24:35 +02:00
firefart 21cfa07a9a support tcp dns servers 2025-05-22 10:17:51 +02:00
firefart d20300cc46 linting 2025-04-01 14:43:51 +02:00
firefart d250564985 lint 2025-03-24 19:41:36 +01:00
firefart ab2b8f33a7 cleanup 2025-03-03 00:49:19 +01:00
firefart 0a3a0ea4a1 fix interface selection 2025-03-02 23:44:25 +01:00
firefart 15bcb6d3c7 fix progress 2025-03-02 23:21:08 +01:00
Adam Cammack 02b83910b1 Fix progress with patterns and backup discovery (#548)
* Account for patterns in total tries

Specifying patterns for the word list will no longer cause progress to
go past 100%. Additionally, the GobusterDir transformations for file
extensions and backups will be applied after pattern expansion.

Fixes #405, #480, and #533

* Run backup detection on success only

This is done by re-arranging the code from exiting on channel close to
using the contexts and the results counters to signal the end of work
processing. A little more work is needed to prevent infinite loops
caused by devious services/misconfiguration and to expose to the cli the
ability to have patterns run on successful finds.

Fixes #298

* Prioritize stopping when the context is done

From the Go spec:
> If one or more of the communications can proceed, a single one that
> can proceed is chosen via a uniform pseudo-random selection.

Previously, this meant that some indeterminate amount of work could have
been completed after the context's cancel function had been called.

* Prevent recursion of discovery guess

Successful guesses from the wordlist or a pattern will have discovery
patterns generated based on them and successful discovery guesses will
not. Further processing should require human curation to avoid
automatically generating an unbounded amount of traffic.

Also fixes reading the wordlist from standard in by making it more like
reading from a file now that we have dynamic progress updates.

* Add option for arbitrary discovery patterns

* Test only patterns if provided a pattern file

* Update discover pattern option description
2025-02-19 21:15:54 +01:00
Christian Mehlmauer 171309986e update 2024-08-01 08:09:36 +00:00
firefart 71bec99ed1 fix #506, add support for tls-renegotiation 2024-05-17 21:31:13 +02:00
firefart e3cf8c4791 add port 2024-05-12 18:57:28 +00:00
firefart 3d97c5df89 try to fix Add support for network interface selection #45 again 2024-05-12 18:52:01 +00:00
Christian Mehlmauer d46567c609 Add support for network interface selection #45 2024-04-23 09:00:47 +02:00
Christian Mehlmauer 7335c31227 add warning for #317 2024-03-09 17:25:23 +01:00
firefart c99e164923 also respect quiet mode 2024-02-02 18:45:22 +01:00
firefart 0a77af9d71 no progressbar when no terminal 2024-02-01 20:18:23 +00:00
firefart 33c222ce5e fix #482 2024-02-01 14:05:34 +01:00
Christian Mehlmauer 5a3a3921c5 more work 2023-12-21 00:25:57 +01:00
firefart 08f6652cd8 more debugging and fix #460 2023-11-19 06:38:10 +01:00
firefart e3144d89ef warning 2023-10-29 22:51:50 +01:00
firefart 2068890d83 allow to exclude status codes 2023-10-29 22:29:48 +01:00
Christian Mehlmauer d4c93a4727 use another pkcs12 library to fix #443 2023-09-08 18:51:55 +02:00
firefart 849da0294b rename 2023-08-31 18:40:56 +02:00
firefart 827ac7a4b3 more aliases 2023-08-30 22:44:53 +02:00
firefart 21b2304262 goodbye cobra 2023-08-30 01:13:54 +02:00
firefart e3ed5cb24f no more verbose mode 2023-08-29 20:40:29 +02:00
Christian Mehlmauer 3566fa438b message 2023-08-28 20:18:51 +02:00
Christian Mehlmauer fa605f6a4f rework dns stuff 2023-08-28 19:58:52 +02:00
Christian Mehlmauer abd72deba9 more user friendly error messages 2023-08-17 08:16:56 +02:00
Christian Mehlmauer ba619dd1be 3.6 2023-08-14 10:17:02 +02:00
Christian Mehlmauer d5cc39ea7e Dev (#395) 2023-02-20 09:27:53 +01:00
3bb230056c Dev (#379)
* update to go 1.17

* more go 1.17 updates

* update sponsors

* update makefile

* gitignore

* remove todo

* Fixed errors mixing with progress in stderr by removing progress string with \r

* Added --retry option for dir, fuzz, s3 and vhost modes

* first dev version

* wording

* fix retries

* update help text

* first work for #298

allow for a totalrequests change from within a plugin

* use defer

* ignore invalid control character urls

* add goreleaser

* gitignore

* output color, better status printing

* more color output

* fix nil panics

* Added support for Google Cloud Storage (GCS) bucket scanning. The scanning finds all public buckets listable by anonymous users

* fix gcs module

* update readme

* go 1.18

* go mod tidy

* makefile

* readme

* readme

* better error message

* use generics for set

* use the new netip type

* update version

* colors

* cspell

* improve readability of GobusterVhost (#334)

* improve readability of GobusterVhost

* fix for the merge side effect

* lint

* update

* update

* more work

* remove unused method

* retries

* colored output

* Closes issue #349 (#356)

* fix version

* Closes issue #349

Co-authored-by: firefart <[email protected]>

* Closes issue #315 (#359)

* Closes issue #315

* Syntax fix

* support mtls

* readme

* check for fuzz keyword

* allow for http header fuzzing

* better description

* new option to not canonicalize header names

* basic auth fuzzing

* fix typo in vhost command (#361)

* update

* check error

* error handling

* dev

* enable tls1.0 and 1.1 support

* Bump golang.org/x/term from 0.1.0 to 0.2.0 (#369)

Bumps [golang.org/x/term](https://github.com/golang/term) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/term/releases)
- [Commits](https://github.com/golang/term/compare/v0.1.0...v0.2.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump golang.org/x/crypto from 0.1.0 to 0.2.0 (#368)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.1.0...v0.2.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Adds LF after the work end (#373)

* typo

* Reformat: Add `\n` after the end

Co-authored-by: firefart <[email protected]>

* Bump golang.org/x/crypto from 0.2.0 to 0.3.0 (#374)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump golang.org/x/crypto from 0.3.0 to 0.4.0 (#376)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/checkout from 3.1.0 to 3.2.0 (#377)

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add tftp mode

* better output on tftp mode

* Bump goreleaser/goreleaser-action from 3 to 4 (#378)

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3 to 4.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* readme

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: alexmozzhakov <[email protected]>
Co-authored-by: Nicolas Lykke Iversen <[email protected]>
Co-authored-by: Neal Caffery <[email protected]>
Co-authored-by: n30nx <[email protected]>
Co-authored-by: IPv4v6 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: _Magenta_ <[email protected]>
2022-12-19 11:47:58 +01:00
Christian Mehlmauer b90dd32291 Dev (#362) 2022-10-29 16:34:51 +02:00