⚠️ Breaking Changes:
The Passive Crawling capability is being removed from katana and released as a separate project urlfinder by @dogancanbakir in #899
PASSIVE:
-ps, -passive enable passive sources to discover target endpoints
-pss, -passive-source string[] passive source to use for url discovery (waybackarchive,commoncrawl,alienvault)
What's Changed
🎉 New Features
- Added
no-clobber
flag to prevent katana from overwriting existing local files. by @dogancanbakir in #827
-ncb, -no-clobber do not overwrite output file
- Added
-store-field-dir
flag to make per-host field directory optional by @dogancanbakir in #877
-sfd, -store-field-dir string store per-host field to custom directory
🐞 Bug Fixes
- Fixed improper logging configuration by @dogancanbakir in #825
- Fixed the issue with setting custom headers/cookie headers by @RamanaReddy0M in #813
- Fixed header marshalling issue by preserving the header name casing by @dogancanbakir in #924
- Fixed ignoring form data extraction with
-form-extraction
when action is "#" by @dogancanbakir in #1052 - Fixed initial host scope checks to allow continued crawling when
-crawl-scope
is used by @dogancanbakir in #858 - Fixed duplicate field output when multiple value is used with
-field
flag by @dogancanbakir in #1031 - Fixed Dockerfile build errors by updating Golang by @dualfade in #1034
- Fixed issue where Ctrl-c could not terminate the process in headless mode with
-show-browser
option by @zrquan in #972 - Fixed the issue with setting custom headers/cookie headers in headless mode by @michael2to3 in #868
- Fixed cookie handling in hybrid mode to include in output by @alban-stourbe-wmx in #936
Other Changes
- The leakless switch is now enabled by default in headless mode, ensuring the browser is terminated when the Go process ends by @dogancanbakir in #831
- Updated README for recently introduced flag
-e
by @zy9ard3 in #826 - Corrected typos in comments by @eveneast in #851
- Added directive to ensure compatibility with Windows OS or 386 architecture by @Mzack9999 in #841
- Added deduplication for stored the fields on scan completion by @dogancanbakir in #885
- Updated README for installation command by @dwisiswant0 in #1015
- Added a response parser to extract endpoints from htmx attributes by @zrquan in #994
- Updated chrome launcher logic to prioritize the specified Chrome path with
-scp
over default paths by @zrquan in #979 - Added automatic form filling for select and textarea in forms by @alban-stourbe-wmx in #921
- Disabled headless auto form filling by @dogancanbakir in #918
- Added more JavaScript Libraries to improve parsing coverage by @geeknik in #900
- Corrected path handling with filepath.Join to use OS-specific separators. @ShuBo6 in #883
- Updated Dockerfile to recent Golang and Alpine images by @o6uoq in #886
- Improved form extraction logic to use HTML placeholder if input value is missing by @fmuttis in #957
New Contributors
- @zy9ard3 made their first contribution in #826
- @eveneast made their first contribution in #851
- @ShuBo6 made their first contribution in #883
- @o6uoq made their first contribution in #886
- @michael2to3 made their first contribution in #868
- @alban-stourbe-wmx made their first contribution in #936
- @zrquan made their first contribution in #972
- @fmuttis made their first contribution in #957
- @dualfade made their first contribution in #1034
- @dwisiswant0 made their first contribution in #1015
Full Changelog: v1.1.0...v1.1.1