What's Changed
For a more in-depth explanation of how status code filtering has changed, please see the docs. Here are the cliff notes:
--filter-statusand--status-codesare now mutually exclusive options--status-codesworks the same way it always has: by providing an allow-list for status codes. Any status code not included in--status-codeswill be filtered out- If a value is given to
--filter-status, that status code will be filtered out, while all other status codes are allowed to proceed
Additionally, there is a new flag, --force-recursion. This flag tells feroxbuster to ignore its typical recursion logic in favor of recursing into any ‘found’ asset. A ‘found’ asset is an endpoint that was not filtered out by other scan settings (i.e. –filter-status or similar). More info available here.
Finally, the default path to the wordlist on windows has been updated to look in the current directory: .\SecLists\Discovery\Web-Content\raft-medium-directories.txt
🎉 Special thanks to @0xdf223 and @ThisLimn0 🎉
Full Changelog: v2.6.4...2.7.0