Skip to content

v1.1.1

Latest
Compare
Choose a tag to compare
@dogancanbakir dogancanbakir released this 28 Oct 13:38
f8486d4

⚠️ Breaking Changes:

The Passive Crawling capability is being removed from katana and released as a separate project urlfinder by @dogancanbakir in #899

PASSIVE:
    -ps, -passive                   enable passive sources to discover target endpoints
    -pss, -passive-source string[]  passive source to use for url discovery (waybackarchive,commoncrawl,alienvault)

What's Changed

🎉 New Features

  • Added no-clobber flag to prevent katana from overwriting existing local files. by @dogancanbakir in #827
-ncb, -no-clobber                 do not overwrite output file
  • Added -store-field-dir flag to make per-host field directory optional by @dogancanbakir in #877
   -sfd, -store-field-dir string     store per-host field to custom directory

🐞 Bug Fixes

  • Fixed improper logging configuration by @dogancanbakir in #825
  • Fixed the issue with setting custom headers/cookie headers by @RamanaReddy0M in #813
  • Fixed header marshalling issue by preserving the header name casing by @dogancanbakir in #924
  • Fixed ignoring form data extraction with -form-extraction when action is "#" by @dogancanbakir in #1052
  • Fixed initial host scope checks to allow continued crawling when -crawl-scope is used by @dogancanbakir in #858
  • Fixed duplicate field output when multiple value is used with -field flag by @dogancanbakir in #1031
  • Fixed Dockerfile build errors by updating Golang by @dualfade in #1034
  • Fixed issue where Ctrl-c could not terminate the process in headless mode with -show-browser option by @zrquan in #972
  • Fixed the issue with setting custom headers/cookie headers in headless mode by @michael2to3 in #868
  • Fixed cookie handling in hybrid mode to include in output by @alban-stourbe-wmx in #936

Other Changes

  • The leakless switch is now enabled by default in headless mode, ensuring the browser is terminated when the Go process ends by @dogancanbakir in #831
  • Updated README for recently introduced flag -e by @zy9ard3 in #826
  • Corrected typos in comments by @eveneast in #851
  • Added directive to ensure compatibility with Windows OS or 386 architecture by @Mzack9999 in #841
  • Added deduplication for stored the fields on scan completion by @dogancanbakir in #885
  • Updated README for installation command by @dwisiswant0 in #1015
  • Added a response parser to extract endpoints from htmx attributes by @zrquan in #994
  • Updated chrome launcher logic to prioritize the specified Chrome path with -scp over default paths by @zrquan in #979
  • Added automatic form filling for select and textarea in forms by @alban-stourbe-wmx in #921
  • Disabled headless auto form filling by @dogancanbakir in #918
  • Added more JavaScript Libraries to improve parsing coverage by @geeknik in #900
  • Corrected path handling with filepath.Join to use OS-specific separators. @ShuBo6 in #883
  • Updated Dockerfile to recent Golang and Alpine images by @o6uoq in #886
  • Improved form extraction logic to use HTML placeholder if input value is missing by @fmuttis in #957

New Contributors

Full Changelog: v1.1.0...v1.1.1