Releases: chainreactors/spray
Releases · chainreactors/spray
v1.2.3
Changelog
- [feat] support --finger-file to dynamically load finger configurations from local file or remote URL,
simplifying finger database management - [feat] add --host flag to customize Host header for virtual host testing,
#120 - [fix] fix request body not being sent in HTTP requests, #113
- [fix] fix frameworks fingerprint matching panic caused by incorrect method call,
#117 - [fix] fix raw query parameters causing panic in URL parsing, #125
- [fix] fix stat file not being created and saved correctly in check mode
- [fix] fix checkpool deadlock issue by increasing channel buffer sizes and optimizing redirect handling
- [improve] refactor config table display using lipgloss table for better readability and formatting
- [improve] optimize HTTP request building with new RequestConfig structure supporting custom host and body
Full Changelog: v1.2.2...v1.2.3
v1.2.2
Changelog
- [feat] 支持通配符状态码, example:
--black-status +40*,51*,3*, #38 - [feat] support unique when format result, #104
- [feat] 新增插件fuzzuli generate algorithm 生成备份文件字典, example:
--fuzziluor-a中包含此插件 - [fix] null word not continue, #108
- [fix] fix log not print when exit
- [fix] csv format , #97
- [fix] crawl and url not print
- [fix] cicd releaser
- [fix] addition word not safe join path, #106
- [fix] -e not expect , #108
- [fix] extractor not save to file, #81
- [improve] add black,white,unique short flag
- [improve]
append-ruleadd short flag-R
Full Changelog: v1.2.1...v1.2.2
v1.2.1
v1.2.0
Changelog
- [feat] 支持proxyclient, 现在支持http/https, socks4/socks5, ssh, shadowsocks等代理,
--proxy http://127.0.0.1:1080 - [feat] 去掉了internal包,现在可以当作库被调用了
- [fix] try fix deadlock, thanks #89 , resolve: #90 #80 #78 #68
- [fix] init failed bar not close
- [fix] total bar not wait
- [fix] chunk mod not read
- [fix] nil bar panic
- [enhance] add default accept and user-agent header
- [enhance] 优化spray输出, 使其更加紧凑
- [enhance] 使用go 1.20编译, 支持更多的操作系统
v1.1.6
Changelog
- [revert] 非同源的redirect会自动对当前网站也尝试一次爆破
- [fix] path join not expect
- [enhance] add hard exit, #78
Full Changelog: v1.1.5...v1.1.6
v1.1.5
Changelog
- [fix] 优化redirect自动过滤规则, 不同host的redirect现在不会被自动过滤了
- [enhance] 自动跳过非同host的redirect爆破
- [enhance] 添加404 到fuzzystatus(这个能大大减少误报, 但是也会导致漏掉一些特殊的目录), 添加429 waf status
- [enhance] 优化状态码颜色渲染
v1.1.4
Changelog
- [enhance] 优化指定probe时的输出, 现在输出结果不会有无用字符, 与httpx或者gogo作用相同
- [enhance] baseline中添加了parent(派生自)和from(派生来源)属性, 用来进一步追踪目录自动派生情况
- [enhance] 添加
--append-depth限制append派生深度, 防止无限派生
Full Changelog: v1.1.3...v1.1.4
v1.1.3
Changelog
- [fix] timeout 不生效, 导致扫描在较多失败下几乎停滞的bug.
- [fix] brutepool baseurl解析错误
- [fix] 统计时 found 字段不准确的bug
- [fix] --no-stat not work
- [fix] fallback 日志多次输出的bug
- [enhance] clean fallback print
- [enhance] -q 对初始的config print生效
感谢使用中提出的bug用户
