Commit graph

183 commits

Author SHA1 Message Date
Joona Hoikkala
de9ac86677
Fixed setting unlimited rate in interactive console (#748)
* Fixed setting unlimited rate in interactive console

* Add changelog entry
2023-10-22 17:34:24 +03:00
Joona Hoikkala
0e024f4208
Fix autocalibration-strategy merging, add tests (#732) 2023-09-20 13:22:05 +03:00
Joona Hoikkala
6487328cd8
Fix csv test (#731) 2023-09-20 10:44:52 +03:00
Joona Hoikkala
7a2756a8f3
Prepare for v2.1.0 release (#724) 2023-09-16 15:18:12 +03:00
Joona Hoikkala
36124a1afe
Default to match 2XX (#723)
* Change the status matcher defaults to accept any 2XX response code

* Add changelog entry
2023-09-15 19:11:48 +03:00
Joona Hoikkala
e3e4e6250d
Report if request times out while time matcher / filter is active (#722)
* Report if request times out while time matcher / filter is active

* Add changelog entry

* Fix sprintf statement

* Make linter happy
2023-09-15 19:04:20 +03:00
Aristos Miliaresis
e80fdc47c0
[FEATURE] Extensible Auto-calibration strategies (#694)
* blacklist detection

* added option to help.go

* refactored -blacklist-detection to autocalibrationstrategy extra

* "No common filtering values found" fixed

* added wildcard not found detection

* custom auto-calibration strategies

* Make linter happy

---------

Co-authored-by: Joona Hoikkala <5235109+joohoi@users.noreply.github.com>
2023-09-15 18:26:45 +03:00
Maxime Catrice
a7dea16d62
allow unused wordlist in config file (#652) 2023-09-15 17:46:52 +03:00
Nils Hanke
8453335088
Don't write a finishing newline in silent mode (#677) 2023-09-15 17:25:04 +03:00
Joona Hoikkala
02e6a73724
Add -raw cli flag (#721) 2023-09-15 17:12:31 +03:00
Joona Hoikkala
3fdb4e2b6a
Automatic brotli and deflate decompression (#720) 2023-09-15 17:08:44 +03:00
serg
9f2163acd3
fix csv output file format (#683)
* fix csv output file format

* Add my username to the CONTRIBUTORS.md

---------

Co-authored-by: Joona Hoikkala <5235109+joohoi@users.noreply.github.com>
2023-09-13 11:39:12 +03:00
haseobang
6f29907b4f
Fixed Error for HTML Output (#714)
* Update file_html.go

Fixed Error for HTML Output

[ERR] template: output.html:74:94: executing "output.html" at <$result.HTMLColor>: can't evaluate field HTMLColor in type output.htmlResult

* Update CONTRIBUTORS.md

* Update CHANGELOG.md

* Update CHANGELOG.md

---------

Co-authored-by: Joona Hoikkala <5235109+joohoi@users.noreply.github.com>
2023-09-13 11:34:43 +03:00
Ephex2
96fef6213d
Fix Issue696 -- Divide by 0 Error when setting rate to 0 manually (#700)
* added check to RateThrottle.ChangeRate() in rate.go to prevent a divide by 0 error when the rate is set to 0. Ref: issue 696: https://github.com/ffuf/ffuf/issues/696

* added name to contributors.md and small change description to changelog.md as requested in PR doc

* Update CONTRIBUTORS.md

---------

Co-authored-by: Joona Hoikkala <5235109+joohoi@users.noreply.github.com>
2023-09-13 11:31:40 +03:00
Serizao
301968cb1c
Add cert authentication to crawl (#713)
* Add cert authentication to crawl

* Update CONTRIBUTORS.md

* Update CONTRIBUTORS.md
2023-09-12 15:50:31 +03:00
Joona Hoikkala
ca2224c148
Pencode (#717)
* Pencode integration

* Added CHANGELOG entry

* Make linter happy
2023-09-12 15:08:57 +03:00
Joona Hoikkala
5fd821c17d
Fix md output format (#672)
* Fix MD output

* Add CHANGELOG.md entry
2023-04-21 18:19:18 +03:00
DoI
b8705ef9c1
Add additional check for keywords when using sniper mode (#661) 2023-04-21 17:46:38 +03:00
Joona Hoikkala
a3bd865aef
Support older versions of TLS regardless of Go defaults (#671)
* Explicitly allow TLS1.0 in HTTP client

* Add CHANGELOG.md entry
2023-04-21 17:44:24 +03:00
Rémi GASCOU (Podalirius)
627c8710cd
[Fix] Fixed multiline output when using only one fuzz variable (issue #645) (#656)
* Fixed incorrect len() in pkg/output/stdout.go::PrintResult()

* Fixed incorrect iteration on res.Input in pkg/output/stdout.go::prepareInputsOneLine(), Fixes #645

* Update CONTRIBUTORS.md

* Update pkg/output/stdout.go

---------

Co-authored-by: Joona Hoikkala <5235109+joohoi@users.noreply.github.com>
2023-04-21 17:22:09 +03:00
Maxime Catrice
b2c1f9471f
Fix HTML output (#640) 2023-02-19 14:41:37 +02:00
Joona Hoikkala
e952deb061
Fix the v2 tagging for go install (#639) 2023-02-06 11:20:28 +02:00
Joona Hoikkala
77cc45cd98
Prepare for v2.0 release (#635) 2023-02-04 15:06:35 +02:00
Joona Hoikkala
c7d0fb5cf5
Gracefully error in case stdin is used for search result (#634) 2023-02-04 13:36:00 +02:00
Joona Hoikkala
643f6b883f
Scraper functionality (#633)
* Scraper functionality

* Handle matched only - case for scraper

* Add scraper output to different formats

* Fix the ancient merge reminders

* Load scraper rules from directory

* Scraper fixes
2023-02-04 13:23:31 +02:00
DoI
39c89344a0
Added additional proxy URL verification (#574)
* Added additional proxy URL verification

* Update pkg/ffuf/optionsparser.go

Co-authored-by: Joona Hoikkala <joohoi@users.noreply.github.com>

---------

Co-authored-by: Joona Hoikkala <joohoi@users.noreply.github.com>
2023-02-03 09:09:29 +02:00
DoI
ebb4c44072
Sniper template parsing - fixes #579 (#580)
* Add sniper template error cases to tests

* move injectKeyword to a seperate output slice - Fixes #579
2023-02-02 16:01:07 +02:00
Joona Hoikkala
9bddff79b9
New functionality to map fired blind payloads back to the initial request (#632)
* Fix ioutil deprecation and use xdg paths instead (wip)

* Clean up deprecated ioutil references, add config directory structure creation and run entry creation

* Add wordlist position setting and FFUFHASH variable

* Save full wordlist paths and print out a raw request when searched

* Cast from string to 32bit integer, 2billion should be enough for a position

* Use correct format strings for float
2023-02-02 11:51:11 +02:00
Joona Hoikkala
b7adc5038d
Fix jsonlines output while in silent mode (#630) 2023-01-31 17:10:08 +02:00
Joona Hoikkala
2ce22175da
Enhanced rate limiting (#620)
* Enhanced rate limiting

* Use time.Ticker correctly
2023-01-04 11:23:32 +02:00
Joona Hoikkala
1a684a9c88
Fix the ac for good now (#615) 2022-12-07 23:02:53 +02:00
Joona Hoikkala
3328a284d2
Fix linter workflow and autocalibration for lines & words match (#614)
* Fix autocalibration for lines & words match

* Fix golangci-lint workflow
2022-12-07 18:26:06 +02:00
Joona Hoikkala
5c489aea78 Prepare for 1.5.0 release (#23) 2022-05-19 09:33:57 +03:00
Joona Hoikkala
1db80d49fc Do autocalibration for full path (#22)
* Do autocalibration for full path

* Linter fixes
2022-05-19 09:33:42 +03:00
Joona Hoikkala
21a19a1f3d Choose between 'and' and 'or' matching and filtering (#20) 2022-05-19 09:32:34 +03:00
Joona Hoikkala
9fa0a5d20a
Ac rewrite
* Full revamp of filtering, and autocalibration settings.

* Fix concurrency issue in calibration

* Fix linting
2022-05-19 09:31:54 +03:00
Joona Hoikkala
0aa69b527c
Prepare point release v1.4.1 (#538) 2022-04-04 01:22:50 +03:00
Joona Hoikkala
2345bfa86d
Fixes to recursion and wordlist handling for queued jobs (#537) 2022-04-04 01:19:39 +03:00
Joona Hoikkala
f6735d56dc
Prepare for release 1.4.0 (#535)
* Prepare for release 1.4.0

* Prep changelog
2022-03-26 11:01:25 +02:00
animesh
40978ba54a
Edit comment wordlist go (#528)
* Edited a comment

* Added my github to contributors file

* edited contributors.md file to sort my name

Co-authored-by: Animesh Kumar <animesh.kumar@privafy.com>
2022-03-25 18:20:31 +02:00
h1x
571b3397db
Fix a recursion bug when redirected to the same domain and a port was specified (#377) (#522)
This fixes the situation where the URL port is specified from the
command line and the "Location" redirection header contains an
absolute URL path.
2022-03-06 18:14:52 +02:00
Justin Steven
4c1a75498b
Add -json option (#509)
* Add -json option

Prints newline-delimited JSON output to STDOUT

* sort

* Clear terminal line via STDERR foreach JSON result

For each JSON result being printed, prepend it with a TERMINAL_CLEAR_LINE via
STDERR. This clears the progress line (which is also being emitted via STDERR)
and leaves us with a clean stream of JSON lines in the terminal.
2022-03-06 16:39:33 +02:00
DoI
9aeae16a08
Add Sniper Mode (#469)
* Modify SimpleRunner to take a Request parameter, add base and copy functions for Requests

* Add Request structs to run queues

* Implemented sniper mode

* Added request and optionsparser tests for sniper mode

* Removed unneccesary print statements

* Updated readme.md and terminal output

* Enabled command inputs for sniper mode

* correctly initialize validmode in optionsparser

* Remove unnecessary print data in TestScrubTemplates

* Use InputProvider for sniper template characters

* Add a sniper-mode specific queue job execution log
2022-03-06 16:14:45 +02:00
Maxime Catrice
80a4aa7783
Fix -of all output and add HTTP/2 support (#451) (#462)
* Fix -of all output (#451)

* Add HTTP/2 support
2022-01-28 17:49:53 +02:00
Massimo Prencipe
415ec0fd23
Add some tests (#479) 2022-01-22 19:52:27 +02:00
Alexandre ZANNI
3cc6557fc4
500 Internal Server Error -> default matched status codes (#510)
* match 500 status code responses by default

* include 500 into default match codes

* match 500: update help message

* Update CHANGELOG.md
2022-01-22 18:58:07 +02:00
Joona Hoikkala
b440d6dd49 Add functionality to append instead to replace filters in interactive mode (#13) 2022-01-22 18:54:57 +02:00
Gustavo Costa
3c78f89c83
Include full line colors (#446)
* Include full line colors

* Update CHANGELOG and CONTRIBUTORS
2021-05-17 01:35:55 +03:00
DoI
965f282c0b
Response time logging and filtering (#433)
* Added response time reporting and filtering

* Update to use the http config context

* Added changelog and contributor info

* Round time output in stdout to nearest millisecond

* Change stdout duration rounding to use Milliseconds()

* Go back to Round() for timing output

* Changed stdout to display millisecond durations

Co-authored-by: Joona Hoikkala <joohoi@users.noreply.github.com>
2021-05-17 00:10:56 +03:00
Joona Hoikkala
b56de007d4
Print results found during interactive mode after exiting it (#445) 2021-05-14 00:13:24 +03:00