Skip to content

v2.2.0

Choose a tag to compare

View all tags
@epi052 epi052 released this 18 Feb 18:09
v2.2.0
030b588
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
  • added --parallel option
  • bumped tokio to version 1.2.0
  • bumped serde_json to version 1.0.62

special thanks to Nicolas Krassas (@Dinosn) for the suggestion 🎉

Version 2.2.0 introduces the --parallel option. If you're one of those people who use feroxbuster to scan 100s of hosts at a time, this is the option for you! --parallel spawns a child process per target passed in over stdin (recursive directories are still async within each child).

The number of parallel scans is limited to whatever you pass to --parallel. When one child finishes its scan, the next child will be spawned.

Unfortunately, using --parallel limits terminal output such that only discovered URLs are shown. No amount of -v's will help you here. I imagine this isn't too big of a deal, as folks that need --parallel probably aren't sitting there watching the output... 🙃

Example Command:

cat large-target-list | ./feroxbuster --stdin --parallel 10 --extract-links --auto-bail

Resuling Process List (illustrative):

\_ target/debug/feroxbuster --stdin --parallel 10
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-one
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-two
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-three
    \_ ...
    \_ target/debug/feroxbuster --silent --extract-links --auto-bail -u https://target-ten
Assets 10
Loading