Skip to content

Subjack 2.2.0

Choose a tag to compare

View all tags
@haccer haccer released this 15 Mar 18:52
· 18 commits to master since this release
v2.2.0
3e2e9a3

What's New

  • Go modules — modernized from GOPATH to Go modules (Go 1.25)
  • Embedded fingerprints — fingerprints.json is baked into the binary at compile time, no external config file needed
  • Custom DNS resolvers — new -r flag to specify a list of DNS resolvers with random selection and fallback
  • Kickofflabs fingerprint — added new subdomain takeover detection
  • GitHub Actions — CI pipeline and automated cross-platform release builds

Bug Fixes

  • Fixed race condition on concurrent JSON output writes
  • Fixed "Not Vulnerable" printing after a vulnerable detection
  • Fixed domain availability check running redundantly inside fingerprint loop
  • Fixed body fingerprint match not breaking out of outer loop
  • Fixed JSON output file not being truncated on rewrite
  • Fixed flag.Usage set after flag.Parse()
  • Replaced deprecated io/ioutil with modern equivalents

Improvements

  • Reusable HTTP client instead of creating one per request
  • fasthttp request/response objects returned to pool
  • Removed dead code (https(), joinHost())
  • Cleaner architecture — *Options passed through instead of 7+ parameter functions

Install

go install github.com/haccer/subjack@latest
Assets 7
Loading