tag:github.com,2008:https://github.com/devploit/nomore403/releases 2026-03-16T10:09:06Z tag:github.com,2008:Repository/401347836/v1.3.0 2026-03-16T10:11:52Z <h2>What's New in v1.3.0</h2> <h3>New Features</h3> <ul> <li><strong>Input List Support</strong> (<code>-u</code>): Pass a file containing multiple URLs (one per line) to scan them all in a single run. The <code>-u</code> flag now auto-detects whether the argument is a URL or a file path. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2345169162" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/37" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/37/hovercard" href="https://github.com/devploit/nomore403/issues/37">#37</a>)</li> <li><strong>Output to File</strong> (<code>-o</code>): Save scan results directly to a file for later analysis.</li> <li><strong>JSON Output</strong> (<code>--json</code>): Output all results in structured JSON format, ideal for piping into other tools or automation pipelines. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2345169162" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/37" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/37/hovercard" href="https://github.com/devploit/nomore403/issues/37">#37</a>)</li> <li><strong>Unicode Encoding Technique</strong>: New <code>unicode</code> bypass technique that generates overlong UTF-8 (<code>%c1%a1</code>), <code>%uXXXX</code>, and multi-byte overlong encoded path variations to evade WAFs and path filters. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2919400229" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/47" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/47/hovercard" href="https://github.com/devploit/nomore403/issues/47">#47</a>)</li> <li><strong>Custom Payload Positions</strong> (<code>-p</code>): Define injection points in the URL using custom markers (e.g., <code>-p '§' -u 'http://target.com/§100§/admin'</code>). Payloads from endpaths and midpaths are injected at each marked position. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2212943834" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/34" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/34/hovercard" href="https://github.com/devploit/nomore403/issues/34">#34</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>HTTP/2.0 Request File Parsing</strong>: Fixed a bug where <code>HTTP/2.0</code> in Burp Suite request files was incorrectly converted to <code>HTTP/1.1.0</code> instead of <code>HTTP/1.1</code>.</li> <li><strong>Query String Preservation</strong>: Fixed query strings being silently dropped in double-encoding, midpaths, and path-case-switching techniques.</li> <li><strong>Double-Encoding Byte Index</strong>: Fixed incorrect byte slicing for multi-byte runes in the double-encoding technique.</li> <li><strong>Overlong UTF-8 Formula</strong>: Fixed the 2-byte overlong encoding formula that was producing incorrect byte sequences (e.g., <code>%c0%e1</code> instead of <code>%c1%a1</code> for 'a').</li> </ul> <h3>Improvements</h3> <ul> <li>Added 4 new bypass-relevant endpaths: <code>?&amp;</code>, <code>..</code>, <code>/.</code>, <code>;/</code></li> <li>Unicode encoding is now included in the default technique list</li> <li>Wider main banners (NOMORE403, AUTO-CALIBRATION) for better visual hierarchy</li> <li>Thread-safe JSON result accumulation</li> <li>Comprehensive test coverage for all new features and bug fixes (29 tests passing)</li> </ul> <h3>Closes</h3> <ul> <li><a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2345169162" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/37" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/37/hovercard" href="https://github.com/devploit/nomore403/issues/37">#37</a> - Input List/Output</li> <li><a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2919400229" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/47" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/47/hovercard" href="https://github.com/devploit/nomore403/issues/47">#47</a> - Enhancement techniques (Unicode encoding)</li> <li><a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2212943834" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/34" data-hovercard-type="issue" data-hovercard-url="/devploit/nomore403/issues/34/hovercard" href="https://github.com/devploit/nomore403/issues/34">#34</a> - Custom payload positions</li> </ul> devploit tag:github.com,2008:Repository/401347836/v1.2.0 2026-03-10T19:09:10Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/562900954979a6b4b50728c164ca4b631116d1bd/hovercard" href="https://github.com/devploit/nomore403/commit/562900954979a6b4b50728c164ca4b631116d1bd"><tt>5629009</tt></a> Avoid bad messages on terminal</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/037c18cba07c9f444e768d4e8c6e08a4d6a55e10/hovercard" href="https://github.com/devploit/nomore403/commit/037c18cba07c9f444e768d4e8c6e08a4d6a55e10"><tt>037c18c</tt></a> Fix request handling and add tests</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/a44e39e93237e3d0d908f569c98ca56ebb87a3b7/hovercard" href="https://github.com/devploit/nomore403/commit/a44e39e93237e3d0d908f569c98ca56ebb87a3b7"><tt>a44e39e</tt></a> Improve reliability, output quality, and fix request-file query string bug</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/df9fdda3e364710ede6d85c563a7ef5999196395/hovercard" href="https://github.com/devploit/nomore403/commit/df9fdda3e364710ede6d85c563a7ef5999196395"><tt>df9fdda</tt></a> Merge pull request <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3903154018" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/51" data-hovercard-type="pull_request" data-hovercard-url="/devploit/nomore403/pull/51/hovercard" href="https://github.com/devploit/nomore403/pull/51">#51</a> from devploit/devploit/review-project</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/a43243fcb67cf9830087dd9f2a5468ea6e87f05f/hovercard" href="https://github.com/devploit/nomore403/commit/a43243fcb67cf9830087dd9f2a5468ea6e87f05f"><tt>a43243f</tt></a> Merge pull request <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3944792167" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/53" data-hovercard-type="pull_request" data-hovercard-url="/devploit/nomore403/pull/53/hovercard" href="https://github.com/devploit/nomore403/pull/53">#53</a> from clarabennettdev/add-version-flag</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/f12f2c6cf6cae034768a030c0a3be52d18257d9c/hovercard" href="https://github.com/devploit/nomore403/commit/f12f2c6cf6cae034768a030c0a3be52d18257d9c"><tt>f12f2c6</tt></a> Merge pull request <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4004545140" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/54" data-hovercard-type="pull_request" data-hovercard-url="/devploit/nomore403/pull/54/hovercard" href="https://github.com/devploit/nomore403/pull/54">#54</a> from SecHoussam/main</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/3b8ee5d6ad5264843c0b510293629ead874a5378/hovercard" href="https://github.com/devploit/nomore403/commit/3b8ee5d6ad5264843c0b510293629ead874a5378"><tt>3b8ee5d</tt></a> Merge pull request <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4037605511" data-permission-text="Title is private" data-url="https://github.com/devploit/nomore403/issues/55" data-hovercard-type="pull_request" data-hovercard-url="/devploit/nomore403/pull/55/hovercard" href="https://github.com/devploit/nomore403/pull/55">#55</a> from SecHoussam/main</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/1d8c47e32530f710da72fe97e77f65d41bf23af4/hovercard" href="https://github.com/devploit/nomore403/commit/1d8c47e32530f710da72fe97e77f65d41bf23af4"><tt>1d8c47e</tt></a> Update midpaths</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/2e18dbc8cae887217a586fe1ced1dba0c36c6bfb/hovercard" href="https://github.com/devploit/nomore403/commit/2e18dbc8cae887217a586fe1ced1dba0c36c6bfb"><tt>2e18dbc</tt></a> Update midpaths with additional path entries</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/4e607bd7a5584d833da02101daf08d738c5413b7/hovercard" href="https://github.com/devploit/nomore403/commit/4e607bd7a5584d833da02101daf08d738c5413b7"><tt>4e607bd</tt></a> feat: add --version flag</li> </ul> github-actions[bot] tag:github.com,2008:Repository/401347836/v1.1.8 2025-04-18T18:50:40Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/a601fce527a51ff573129bca9d52370e407a2cc2/hovercard" href="https://github.com/devploit/nomore403/commit/a601fce527a51ff573129bca9d52370e407a2cc2"><tt>a601fce</tt></a> Fix segfault when invalid URL is parsed</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/8db6b582100f960998377d9da300cd618371a5f2/hovercard" href="https://github.com/devploit/nomore403/commit/8db6b582100f960998377d9da300cd618371a5f2"><tt>8db6b58</tt></a> Update README.md</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/ac9847358588bd30211e38e24142269f715b96ad/hovercard" href="https://github.com/devploit/nomore403/commit/ac9847358588bd30211e38e24142269f715b96ad"><tt>ac98473</tt></a> Update README.md</li> </ul> github-actions[bot] tag:github.com,2008:Repository/401347836/v1.1.7 2025-04-17T10:54:37Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/736897046916cc8b64efc52f426d4c9220745501/hovercard" href="https://github.com/devploit/nomore403/commit/736897046916cc8b64efc52f426d4c9220745501"><tt>7368970</tt></a> Reduce complexity of requester() function</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/e8b62f305dca21b83009ff1e913107e7af56dcbf/hovercard" href="https://github.com/devploit/nomore403/commit/e8b62f305dca21b83009ff1e913107e7af56dcbf"><tt>e8b62f3</tt></a> Set go install feature</li> </ul> github-actions[bot] tag:github.com,2008:Repository/401347836/v1.1.6 2025-04-17T10:35:01Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/devploit/nomore403/commit/727c5780aa45fa464225da861a806972dbb9320b/hovercard" href="https://github.com/devploit/nomore403/commit/727c5780aa45fa464225da861a806972dbb9320b"><tt>727c578</tt></a> Update README.md and fix goreleaser version</li> </ul> github-actions[bot] tag:github.com,2008:Repository/401347836/v1.1.5 2025-04-17T10:28:09Z <p>Update Golang version and dependencies</p> devploit tag:github.com,2008:Repository/401347836/v1.1.4 2025-04-17T09:24:24Z <p>Minor refactoring</p> devploit tag:github.com,2008:Repository/401347836/v1.1.3 2025-04-16T18:35:17Z <p>Fix double-encoding function.</p> devploit tag:github.com,2008:Repository/401347836/v1.1.2 2025-04-15T13:36:26Z <p>Minor changes in escapedURL</p> devploit tag:github.com,2008:Repository/401347836/v1.1.1 2025-04-13T17:33:53Z <p>Fix trailing slash issues and ensure compatibility with unusual paths using standard net/url</p> devploit