Skip to content

Releases: chainreactors/spray

v1.2.3

04 Dec 17:44

Choose a tag to compare

Changelog

  • [feat] support --finger-file to dynamically load finger configurations from local file or remote URL,
    simplifying finger database management
  • [feat] add --host flag to customize Host header for virtual host testing,
    #120
  • [fix] fix request body not being sent in HTTP requests, #113
  • [fix] fix frameworks fingerprint matching panic caused by incorrect method call,
    #117
  • [fix] fix raw query parameters causing panic in URL parsing, #125
  • [fix] fix stat file not being created and saved correctly in check mode
  • [fix] fix checkpool deadlock issue by increasing channel buffer sizes and optimizing redirect handling
  • [improve] refactor config table display using lipgloss table for better readability and formatting
  • [improve] optimize HTTP request building with new RequestConfig structure supporting custom host and body

Full Changelog: v1.2.2...v1.2.3

v1.2.2

05 Jun 06:09

Choose a tag to compare

Changelog

  • [feat] 支持通配符状态码, example: --black-status +40*,51*,3*, #38
  • [feat] support unique when format result, #104
  • [feat] 新增插件fuzzuli generate algorithm 生成备份文件字典, example: --fuzzilu or -a 中包含此插件
  • [fix] null word not continue, #108
  • [fix] fix log not print when exit
  • [fix] csv format , #97
  • [fix] crawl and url not print
  • [fix] cicd releaser
  • [fix] addition word not safe join path, #106
  • [fix] -e not expect , #108
  • [fix] extractor not save to file, #81
  • [improve] add black,white,unique short flag
  • [improve] append-rule add short flag -R

Full Changelog: v1.2.1...v1.2.2

v1.2.1

04 Mar 07:03

Choose a tag to compare

Changelog

Full Changelog: v1.2.0...v1.2.1

v1.2.0

22 Feb 16:07

Choose a tag to compare

Changelog

  • [feat] 支持proxyclient, 现在支持http/https, socks4/socks5, ssh, shadowsocks等代理, --proxy http://127.0.0.1:1080
  • [feat] 去掉了internal包,现在可以当作库被调用了
  • [fix] try fix deadlock, thanks #89 , resolve: #90 #80 #78 #68
  • [fix] init failed bar not close
  • [fix] total bar not wait
  • [fix] chunk mod not read
  • [fix] nil bar panic
  • [enhance] add default accept and user-agent header
  • [enhance] 优化spray输出, 使其更加紧凑
  • [enhance] 使用go 1.20编译, 支持更多的操作系统

v1.1.6

01 Nov 05:53

Choose a tag to compare

Changelog

  • [revert] 非同源的redirect会自动对当前网站也尝试一次爆破
  • [fix] path join not expect
  • [enhance] add hard exit, #78

Full Changelog: v1.1.5...v1.1.6

v1.1.5

30 Oct 08:17

Choose a tag to compare

Changelog

  • [fix] 优化redirect自动过滤规则, 不同host的redirect现在不会被自动过滤了
  • [enhance] 自动跳过非同host的redirect爆破
  • [enhance] 添加404 到fuzzystatus(这个能大大减少误报, 但是也会导致漏掉一些特殊的目录), 添加429 waf status
  • [enhance] 优化状态码颜色渲染

v1.1.4

13 Oct 18:27

Choose a tag to compare

Changelog

  • [enhance] 优化指定probe时的输出, 现在输出结果不会有无用字符, 与httpx或者gogo作用相同
  • [enhance] baseline中添加了parent(派生自)和from(派生来源)属性, 用来进一步追踪目录自动派生情况
  • [enhance] 添加 --append-depth 限制append派生深度, 防止无限派生

Full Changelog: v1.1.3...v1.1.4

v1.1.3

23 Sep 09:40

Choose a tag to compare

Changelog

  • [fix] timeout 不生效, 导致扫描在较多失败下几乎停滞的bug.
  • [fix] brutepool baseurl解析错误
  • [fix] 统计时 found 字段不准确的bug
  • [fix] --no-stat not work
  • [fix] fallback 日志多次输出的bug
  • [enhance] clean fallback print
  • [enhance] -q 对初始的config print生效

感谢使用中提出的bug用户

v1.1.2

10 Sep 10:03

Choose a tag to compare

Changelog

image

v1.1.1

29 Aug 06:10

Choose a tag to compare

Changelog

  • [enhance] 支持csv格式输出, 新增类似gogo的独立控制文件输出的选型, -O csv, #62
  • [fix] -m host 无法正常工作的bug, #63
  • [fix] 修复fuzzy的结果不合时宜的出现的bug
  • [fix] 修复潜在的fasthttp socket超时不生效的bug, 可能会导致程序挂死, #58