v0.4.3

• Automatically detect the URI scheme (http or https) if no scheme is provided
• SQLite report format
• Option to overwrite unwanted extensions with selected extensions
• Option to view redirects history when following redirects
• Option to crawl web paths in the responses
• HTTP traffic is saved inside log file
• Capability to save progress and resume later
• Support client certificate
• Maximum size of the log file via configuration
• More accurate

v0.4.2

• More accurate
• Exclude responses by redirects
• URLs from STDIN
• Fixed the CSV Injection vulnerability (https://www.exploit-db.com/exploits/49370)
• Raw request supported
• Can setup the default URL scheme (will be used when there is no scheme in the URL)
• Added max runtime option
• Recursion on specified status codes
• Max request rate
• Support several authentication types
• Deep/forced recursive scan
• HTML report format
• Option to skip target by specified status codes
• Bug fixes

Special thanks to @shelld3v for his contributions!

v0.4.1-alpha

Critical bug fix

v0.4.1

• Faster
• Allow to brute force through a CIDR notation
• Exclude responses by human readable sizes
• Provide headers from a file
• Match/filter status codes by ranges
• Detect 429 response status code
• Support SOCKS proxy
• XML, Markdown and CSV report formats
• Capital wordlist format
• Option to replay proxy with found paths
• Option to remove all extensions in the wordlist
• Option to exit whenever an error occurs
• Option to disable colored output
• Debug mode
• Multiple bugfixes

v0.4.0

• Exclude extensions argument added
• Added custom prefixes and suffixes
• No dot extensions option
• Support HTTP request data
• Added minimal response length and maximal response length arguments
• Added include status codes and exclude status codes arguments
• Added --clean-view option
• Added option to print the full URL in the output
• Added Prefix and Suffix arguments
• Multiple bugfixes

Special thanks to @shelld3v

v0.3.9

• Added default extensions argument (-E).
• Added suppress empty responses.
• Recursion max depth.
• Exclude responses with text and regexes.
• Multiple fixes.

v0.3.8

Changelog:

• Delay argument added.
• Request by hostname switch added.
• Suppress empty switch added.
• Added Force Extensions switch.
• Multiple bugfixes.

v0.3.7

• Force extensions switch added.

v0.3.6-1

deleted unused functions

v0.3.6

Bugfixes