2.7.0

What's Changed

• 535 status code filter overhaul by @epi052 in #536

For a more in-depth explanation of how status code filtering has changed, please see the docs. Here are the cliff notes:

• --filter-status and --status-codes are now mutually exclusive options
• --status-codes works the same way it always has: by providing an allow-list for status codes. Any status code not included in --status-codes will be filtered out
• If a value is given to --filter-status, that status code will be filtered out, while all other status codes are allowed to proceed

Additionally, there is a new flag, --force-recursion. This flag tells feroxbuster to ignore its typical recursion logic in favor of recursing into any ‘found’ asset. A ‘found’ asset is an endpoint that was not filtered out by other scan settings (i.e. –filter-status or similar). More info available here.

Finally, the default path to the wordlist on windows has been updated to look in the current directory: .\SecLists\Discovery\Web-Content\raft-medium-directories.txt

🎉 Special thanks to @0xdf223 and @ThisLimn0 🎉

Full Changelog: v2.6.4...2.7.0