EnableSecurity/wafw00f v2.4.1

on GitHub

What's Changed

Fix timeout enforcement during response body reading to properly handle slow streaming servers.

Bug Fix

• Timeout enforcement: The --timeout parameter is now properly enforced during response body reading, not just during connection establishment. This fixes the issue where slow-streaming servers could cause scans to take over 2 minutes instead of respecting the user-specified timeout.

Changes

• Track elapsed time during chunk reading loop
• Break out of reading loop if timeout is exceeded during reading
• Add test documenting timeout enforcement behavior

This addresses the follow-up report on issue #246 where v2.4.0 fixed infinite hangs but didn't respect timeout during slow streaming.

Full Changelog: v2.4.0...v2.4.1