Skip to content

Releases: devploit/nomore403

v1.1.0

23 Dec 11:43
Compare
Choose a tag to compare

🚀 Major Release Changelog 🚀

We are excited to announce a major release that brings several powerful enhancements, bug fixes, and cutting-edge security techniques. This update takes our project to the next level with improved functionality, performance, and security. Here are the key highlights:

🔧 New Features & Improvements:

  • Auto-Calibration Feature Added:
    To streamline the output and eliminate duplicates, we've introduced an auto-calibrate function. This feature simplifies data processing and makes the output more efficient. Users can still opt to see the full output details using the -v flag for debugging or detailed analysis.
    (Special thanks to Diego Jurado for this great idea!)

  • Switched HTTP Request Library:
    In this release, we've replaced the default Go http library with go-rawurlparser by @slicingmelon. This change resolves parsing issues with specific payloads, ensuring better handling of edge cases. The updated library improves the stability and accuracy of URL parsing, making the system more robust overall.

  • Double URL Encoding Technique:
    Inspired by cutting-edge research, we've incorporated a double URL encoding technique that was introduced in the DEFCON 2024 Bug Bounty Village talk by Justin Rhynorater Gardner. This advanced method helps bypass URL-based filters, enhancing security and offering a sophisticated approach to handling potentially harmful inputs.
    📄 DEFCON 2024 Presentation PDF

  • New Filtering Options:
    We've introduced two new command-line flags, --status and --unique, which allow users to filter results more effectively, providing more control over the output.
    (Thanks to @jaikishantulswani for contributing this feature!)

🛠️ Bug Fixes & Minor Updates:

  • Rewrite of HTTP Versions technique:
    After detecting incorrect behavior in the HTTP Versions technique, it has been rewritten to function as intended.

  • Minor Bug Fixes:
    We've also addressed several small bugs and made improvements to the codebase.
    (Thanks to @nxczje for their valuable PR!)


💡 Looking Ahead:

This release marks a significant step in the evolution of the project, but there's still more to come! We will continue to refine the system, add new features, and address user feedback to make the project even better. Stay tuned for future updates!


🎉 Special Thanks:

We would like to give special recognition to the amazing contributors who have helped shape this release:

1.0.2

19 Mar 14:49
Compare
Choose a tag to compare

Changelog

1.0.1

19 Mar 14:49
Compare
Choose a tag to compare

Changelog

  • 5b69d5d Merge pull request #31 from AlbertoFDR/main
  • 4275e68 Timeout option added. Verb Tampering Case-switching included.
  • 402c2f9 Update README.md
  • 8f3e9f9 file name 'useragent' fixed

1.0.0

27 Feb 18:11
Compare
Choose a tag to compare

New Release: nomore403 1.0.0

We are excited to announce the latest release of nomore403, version 1.0.0. This update brings several new features, improvements, and bug fixes to enhance your experience and provide you with more control over your bypass 403 operations. Here's what's new:

🚀 New Features

  • Follow Redirects Toggle: You now have the option to follow or not follow HTTP redirects, giving you better control over the navigation of your requests.
  • Random User-Agent: Enhance your privacy and avoid detection by opting for a random user-agent for each request you make.
  • Rate-Limit Detection: To prevent hitting API rate limits, nomore403 can now automatically stop if a 429 (rate-limit ban) response is detected, protecting your account from potential blocks.

🛠 Improvements

  • SSL Issue Fix: We've resolved an SSL problem in curl when using a proxy, ensuring a smoother and more secure connection.
  • Multiple Flag Changes: To improve usability and consistency, we've made several changes to our command-line flags.

🔄 Flag Changes

  • Proxy flag updated from -p to -x for better clarity.
  • The -r flag is now used to enable following redirects. To use a request file, please use --request-file instead.
  • Renamed --nobanner to --no-banner for consistency.
  • Introduced --random-agent for easy access to the random user-agent feature.
  • The -l or --rate-limit flag can now be used to halt operations if a rate limit ban is detected.
  • Updated --useragent to --user-agent to align with standard naming conventions.
  • Changed --maxgoroutines to --max-goroutines for improved readability.
  • Modified --httpMethod to --http-method and --bypassIp to --bypass-ip for consistency across our tool.

🐞 Bug Fixes

Addressed a critical SSL connectivity issue when using proxies, ensuring secure and reliable connections under all circumstances.

How to Update

To update to the latest version of nomore403, please download the latest release or build from the latest version of source code. Ensure to adjust your scripts or command line usage to accommodate the new flag changes for a seamless transition.

0.9.4

07 Oct 15:04
Compare
Choose a tag to compare
  • Check different HTTP versions.

Full Changelog: 0.9.3...0.9.4

0.9.3

28 May 23:53
Compare
Choose a tag to compare

Changelog

  • 6e52e2e Fix some typos, add nobanner option and improve visualization

0.9.1

16 May 13:20
Compare
Choose a tag to compare

Changelog

0.8.1

24 Mar 20:57
Compare
Choose a tag to compare
  • New feature: verbose mode
  • Useless block of code deletion
  • Upgrade gorelease version

Full Changelog: 0.8...0.8.1

0.8: New year, new release

21 Mar 21:49
ee4fdab
Compare
Choose a tag to compare

What's Changed

  • Support forcing a different HTTP method for all payloads except httpmethods by @mbrg in #20
  • Fix README 'contributions welcome' link by @MNThomson in #21
  • requester.go: Corrected wording by @ItsIgnacioPortal in #22
  • Bump golang.org/x/text from 0.3.7 to 0.3.8 by @dependabot in #24

New Contributors

Full Changelog: 0.7...0.8

0.5

30 Jun 13:58
Compare
Choose a tag to compare
0.5

Changelog