OJ/gobuster
1
0
Fork 0
mirror of https://github.com/OJ/gobuster.git synced 2026-10-12 02:07:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
607 Commits 4 Branches 24 Tags
master
Commit Graph
133 Commits
Author SHA1 Message Date
Christian Mehlmauer 7f225fa3b1 fix #590 2025-09-04 10:15:45 +02:00
Christian Mehlmauer 210214ea02 update 2025-08-27 11:52:06 +02:00
Christian Mehlmauer 866e0ee6a9 update 2025-08-27 11:46:45 +02:00
firefart 6d837debcc 3.9 2025-07-17 15:28:47 +02:00
Christian Mehlmauer a75cc6372f prepare 2025-06-30 17:45:50 +02:00
Christian Mehlmauer 9d1224af15 fix some potential bugs 2025-06-30 12:44:20 +02:00
Christian Mehlmauer 1e7533c73d fix #567 2025-06-30 11:40:51 +02:00
Christian Mehlmauer 6f2636efd2 lint 2025-06-30 09:46:23 +02:00
firefart d20300cc46 linting 2025-04-01 14:43:51 +02:00
firefart ab2b8f33a7 cleanup 2025-03-03 00:49:19 +01:00
firefart 0a3a0ea4a1 fix interface selection 2025-03-02 23:44:25 +01:00
firefart 15bcb6d3c7 fix progress 2025-03-02 23:21:08 +01:00
Adam Cammack 02b83910b1 Fix progress with patterns and backup discovery (#548) 
* Account for patterns in total tries

Specifying patterns for the word list will no longer cause progress to
go past 100%. Additionally, the GobusterDir transformations for file
extensions and backups will be applied after pattern expansion.

Fixes #405, #480, and #533

* Run backup detection on success only

This is done by re-arranging the code from exiting on channel close to
using the contexts and the results counters to signal the end of work
processing. A little more work is needed to prevent infinite loops
caused by devious services/misconfiguration and to expose to the cli the
ability to have patterns run on successful finds.

Fixes #298

* Prioritize stopping when the context is done

From the Go spec:
> If one or more of the communications can proceed, a single one that
> can proceed is chosen via a uniform pseudo-random selection.

Previously, this meant that some indeterminate amount of work could have
been completed after the context's cancel function had been called.

* Prevent recursion of discovery guess

Successful guesses from the wordlist or a pattern will have discovery
patterns generated based on them and successful discovery guesses will
not. Further processing should require human curation to avoid
automatically generating an unbounded amount of traffic.

Also fixes reading the wordlist from standard in by making it more like
reading from a file now that we have dynamic progress updates.

* Add option for arbitrary discovery patterns

* Test only patterns if provided a pattern file

* Update discover pattern option description
 2025-02-19 21:15:54 +01:00
Christian Mehlmauer 171309986e update 2024-08-01 08:09:36 +00:00
firefart 71bec99ed1 fix #506, add support for tls-renegotiation 2024-05-17 21:31:13 +02:00
Christian Mehlmauer d46567c609 Add support for network interface selection #45 2024-04-23 09:00:47 +02:00
firefart 0a77af9d71 no progressbar when no terminal 2024-02-01 20:18:23 +00:00
Christian Mehlmauer 5a3a3921c5 more work 2023-12-21 00:25:57 +01:00
firefart e4854b209f simplify code 2023-11-19 06:43:37 +01:00
firefart 0af79ea66a comment 2023-11-19 06:40:51 +01:00
firefart 08f6652cd8 more debugging and fix #460 2023-11-19 06:38:10 +01:00
firefart e3144d89ef warning 2023-10-29 22:51:50 +01:00
firefart 7c5d5657c3 use faster line counter 2023-10-29 21:20:00 +00:00
firefart 7a444d971b comments 2023-10-29 01:02:04 +02:00
firefart c6784bc793 update old method 2023-10-29 01:00:10 +02:00
firefart 43136273cc linter 2023-10-28 23:51:40 +02:00
firefart 67d02ca4a6 better (but slower) line counting 2023-10-28 23:49:14 +02:00
firefart 7818dc9242 version string 2023-08-31 18:48:59 +02:00
firefart 21b2304262 goodbye cobra 2023-08-30 01:13:54 +02:00
firefart e3ed5cb24f no more verbose mode 2023-08-29 20:40:29 +02:00
Christian Mehlmauer 4487ef0762 error messages 2023-08-17 12:03:24 +02:00
Christian Mehlmauer abd72deba9 more user friendly error messages 2023-08-17 08:16:56 +02:00
Christian Mehlmauer 441c009199 make error message more user friendly. See #437 2023-08-17 07:56:15 +02:00
Christian Mehlmauer c53db2e0d2 3.7 2023-08-14 10:26:27 +02:00
Christian Mehlmauer ba619dd1be 3.6 2023-08-14 10:17:02 +02:00
Christian Mehlmauer d5cc39ea7e Dev (#395) 2023-02-20 09:27:53 +01:00
Christian Mehlmauerdependabot[bot]alexmozzhakovNicolas Lykke IversenNeal Cafferyn30nxIPv4v6_Magenta_
 		3bb230056c Dev (#379) 
* update to go 1.17

* more go 1.17 updates

* update sponsors

* update makefile

* gitignore

* remove todo

* Fixed errors mixing with progress in stderr by removing progress string with \r

* Added --retry option for dir, fuzz, s3 and vhost modes

* first dev version

* wording

* fix retries

* update help text

* first work for #298

allow for a totalrequests change from within a plugin

* use defer

* ignore invalid control character urls

* add goreleaser

* gitignore

* output color, better status printing

* more color output

* fix nil panics

* Added support for Google Cloud Storage (GCS) bucket scanning. The scanning finds all public buckets listable by anonymous users

* fix gcs module

* update readme

* go 1.18

* go mod tidy

* makefile

* readme

* readme

* better error message

* use generics for set

* use the new netip type

* update version

* colors

* cspell

* improve readability of GobusterVhost (#334)

* improve readability of GobusterVhost

* fix for the merge side effect

* lint

* update

* update

* more work

* remove unused method

* retries

* colored output

* Closes issue #349 (#356)

* fix version

* Closes issue #349

Co-authored-by: firefart <[email protected]>

* Closes issue #315 (#359)

* Closes issue #315

* Syntax fix

* support mtls

* readme

* check for fuzz keyword

* allow for http header fuzzing

* better description

* new option to not canonicalize header names

* basic auth fuzzing

* fix typo in vhost command (#361)

* update

* check error

* error handling

* dev

* enable tls1.0 and 1.1 support

* Bump golang.org/x/term from 0.1.0 to 0.2.0 (#369)

Bumps [golang.org/x/term](https://github.com/golang/term) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/term/releases)
- [Commits](https://github.com/golang/term/compare/v0.1.0...v0.2.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump golang.org/x/crypto from 0.1.0 to 0.2.0 (#368)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.1.0...v0.2.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Adds LF after the work end (#373)

* typo

* Reformat: Add `\n` after the end

Co-authored-by: firefart <[email protected]>

* Bump golang.org/x/crypto from 0.2.0 to 0.3.0 (#374)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump golang.org/x/crypto from 0.3.0 to 0.4.0 (#376)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/checkout from 3.1.0 to 3.2.0 (#377)

Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3.1.0...v3.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add tftp mode

* better output on tftp mode

* Bump goreleaser/goreleaser-action from 3 to 4 (#378)

Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3 to 4.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* readme

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: alexmozzhakov <[email protected]>
Co-authored-by: Nicolas Lykke Iversen <[email protected]>
Co-authored-by: Neal Caffery <[email protected]>
Co-authored-by: n30nx <[email protected]>
Co-authored-by: IPv4v6 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: _Magenta_ <[email protected]>
 2022-12-19 11:47:58 +01:00
Christian Mehlmauer b90dd32291 Dev (#362) 2022-10-29 16:34:51 +02:00
firefart c5ae3b3b83 fix version 2022-10-12 15:29:20 +02:00
Christian Mehlmauer 0a0cab949f Dev Updates (#305) 
* retry on timeout
* Google Cloud Bucket enumeration
* colors in output
* goreleaser
* fix nil reference errors
 2022-10-08 18:41:25 +02:00
Christian Mehlmauer a0b94ee723 remove the wildcard switch from everything except DNS 2021-02-25 01:43:44 +01:00
Christian Mehlmauer 2f636e758c some context changes 2021-02-25 00:35:51 +01:00
firefart 8cfbcb7123 move tls ignore to basic so we can use it in s3 2021-01-28 23:36:26 +01:00
firefart d483ef68a2 missing comment 2021-01-05 00:11:49 +01:00
firefart 8a31cc47e3 more linting 2021-01-05 00:08:05 +01:00
firefart 02fc16d4b6 more linting 2021-01-05 00:01:48 +01:00
firefart 44d4693c6e fix #271, fix #272, linting 2021-01-04 23:48:36 +01:00
OJ f5051ed456 Updated UA to remove dev reference 2020-10-08 09:51:19 +10:00
Christian Mehlmauer d095765771 fix some nasty slice bugs and left justify output in dir mode 2020-08-02 11:01:45 +02:00
Christian Mehlmauer e025d5ac6d fix tests and linter 2020-08-01 13:10:34 +02:00