ZyraxBuster v0.2.0

Added

• VHost/Subdomain fuzzing mode (--vhost)
  • Fuzzes the HTTP Host header instead of URL path
  • Discovers hidden subdomains and virtual hosts
  • Shows discovered subdomains with status code and response size
• Auto-filter (--auto-filter)
  • Auto-detects baseline response (main domain)
  • Filters out responses matching baseline (same status + same size)
• Subdomain wordlist support
  • Auto-detects subdomain wordlists from /usr/share/wordlists/seclists/Discovery/DNS/
  • DNS directories listed in --list-wordlists

Changed

• Updated banner to ASCII art
• Wordlist (-w) is optional (auto-detects if omitted)

---

ZyraxBuster v0.1.1

Release v0.1.1

ZyraxBuster v0.1.0

Initial Release

Added

• Core scanning engine

  • Async concurrent directory/content brute-forcing
  • Configurable worker pool (-t, default: 40)
  • HTTP/HTTPS support with TLS verification bypass (-k)
  • Redirect following toggle (-r)
  • Retry on network errors (--retries)
  • Request timeout configuration (--timeout)

• Wordlist management

  • Wordlist loading from file
  • Auto-detection from common paths (/usr/share/wordlists/, seclists)
  • Short name resolution (e.g., -w common.txt)
  • --list-wordlists to browse available wordlists
  • Comment and blank line filtering

• Filtering

  • Status code whitelist (-s) and blacklist (-b)
  • Content-length minimum filter (--min-length)
  • Content-length exclusion filter (--exclude-length)
  • Extension appending (-x php,html,bak)

• Output

  • Colorized live results
  • Progress bar with ETA
  • File output (-o)
  • JSON output format (--json)

• Stealth features

  • Random User-Agent rotation (--random-agent)
  • Rate limiting with delay (--delay)

• CLI

  • Full help output (--help)
  • Version info (--version)
  • Custom headers (-H, repeatable)
  • Trailing slash option (--add-slash)

Changed

• Updated banner to block-style ASCII art
• Wordlist (-w) is now optional (auto-detects if omitted)

Fixed

• None (initial release)

---