- Added ability to extract links from response bodies
Extract Links Feature Description
Search through the body of valid responses (html, javascript, etc...) for additional endpoints to scan. This turns
feroxbuster into a hybrid that looks for both linked and unlinked content.
Example request/response with --extract-links enabled:
- Make request to
http://example.com/index.html - Receive, and read in, the
bodyof the response - Search the
bodyfor absolute and relative links (i.e.homepage/assets/img/icons/handshake.svg) - Add the following directories for recursive scanning:
http://example.com/homepagehttp://example.com/homepage/assetshttp://example.com/homepage/assets/imghttp://example.com/homepage/assets/img/icons
- Make a single request to
http://example.com/homepage/assets/img/icons/handshake.svg
./feroxbuster -u http://127.1 --extract-links