ffuf (Fuzz Faster U Fool) is a fast web fuzzer written in Go. It is designed
for discovering hidden resources and testing web applications by fuzzing URLs,
HTTP headers, parameters, and POST data.
ffuf supports directory and file discovery, virtual host discovery, parameter
fuzzing, recursive scanning, multiple wordlists, response matching and
filtering, configurable request rates, and several output formats.
It can be used for web application security testing, penetration testing, and
content discovery on authorized targets.
go: Bump go124-dependent ports
Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
security/ffuf: Update to 2.1.0
ChangeLog: https://github.com/ffuf/ffuf/releases/tag/v2.1.0
* Prepare for v2.1.0 release
* Default to match 2XX
* Report if request times out while time matcher / filter is active
* [FEATURE] Extensible Auto-calibration strategies
* allow unused wordlist in config file
* Don't write a finishing newline in silent mode
* Add -raw cli flag
* Automatic brotli and deflate decompression
* Fix #718
* fix csv output file format
* Fixed Error for HTML Output
(Only the first 15 lines of the commit message are shown above )
security/ffuf: Update to 2.0.0
ChangeLog: https://github.com/ffuf/ffuf/releases/tag/v2.0.0
* Fix the v2 tagging for go install
* Fix required go version
* Prepare for v2.0 release
* Gracefully error in case stdin is used for search result
* Scraper functionality
* Added additional proxy URL verification
* Typo fix
* fix: changed usage from version 1.3.0 to version 1.5.0
* Change precedence of quiet and JSON output to favour JSON
* Add homebrew install method
* Fix time-based matcher
* Sniper template parsing - fixes #579
* New functionality to map fired blind payloads back to the initial request
* Fix jsonlines output while in silent mode
* Enhanced rate limiting
* Fix the ac for good now
* Fix linter workflow and autocalibration for lines & words match
PR: 269429
Reported by: 0xdutra@gmail.com (maintainer)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
