tag:github.com,2008:https://github.com/devploit/nomore403/releases 2026-03-16T10:09:06Z tag:github.com,2008:Repository/401347836/v1.3.0 2026-03-16T10:11:52Z <p>feat: add input list, JSON output, unicode encoding, and custom paylo…</p> <p>…ad positions</p> <p>New features: <br />- Input list support: -u flag now accepts a file containing URLs (one per line) (<a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/37">#37</a>) <br />- Output to file: -o flag saves results to a file; --json outputs in JSON format (<a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/37">#37</a>) <br />- Unicode encoding technique: overlong UTF-8 and %uXXXX encoded path bypass attempts (<a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/47">#47</a>) <br />- Custom payload positions: -p flag with markers in URL for targeted payload injection (<a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/34">#34</a>)</p> <p>Bug fixes: <br />- Fix HTTP/2.0 request file parsing: "HTTP/2.0" no longer becomes "HTTP/1.1.0" <br />- Fix query string preservation in double-encoding, midpaths, and path-case-switching <br />- Fix byte index bug in double-encoding for multi-byte runes <br />- Fix overlong UTF-8 formula producing incorrect byte sequences</p> <p>Improvements: <br />- Add 4 new bypass-relevant endpaths (?&amp;, .., /., ;/) <br />- Add unicode technique to default technique list (before http-versions) <br />- Widen main banners (NOMORE403, AUTO-CALIBRATION) to 56 chars for visual hierarchy <br />- Thread-safe JSON result accumulation with mutex <br />- Comprehensive test coverage for all new features and bug fixes (29 tests passing)</p> <p><span class="issue-keyword tooltipped tooltipped-se">Closes</span> <a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/37">#37</a>, <span class="issue-keyword tooltipped tooltipped-se">closes</span> <a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/47">#47</a>, <span class="issue-keyword tooltipped tooltipped-se">closes</span> <a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/34">#34</a></p> <p>Co-Authored-By: Claude Opus 4.6 &lt;[email protected]&gt;</p> devploit tag:github.com,2008:Repository/401347836/v1.2.0 2026-03-10T19:09:10Z <p>v1.2.0 - Reliability, smart output, and UI overhaul</p> <p>- Graceful degradation: technique failures no longer crash the scan <br />- Request retries with exponential backoff for transient errors <br />- Rate limit (429) handled gracefully instead of fatal exit <br />- Input validation for URIs, request files, and proxy URLs <br />- curl availability check before HTTP versions technique</p> <p>- All shared globals replaced with sync/atomic operations <br />- Eliminates race conditions under concurrent goroutines</p> <p>- Multi-sample calibration (3 requests) with dynamic tolerance <br />- Reduces false positives on servers with dynamic content</p> <p>- Non-verbose mode now filters noise: only shows results that differ <br /> from the default response (different status code or content length) <br />- Per-technique dedup: shows 3 examples + count summary <br />- Verbose mode (-v) unchanged — shows everything</p> <p>- Inline progress bar per technique on stderr <br />- TTY-aware: only renders in interactive terminals <br />- Coordinates with output to avoid visual overlap</p> <p>- Compact two-column configuration banner <br />- Content-length colored by divergence from default: <br /> green (much larger), cyan (larger), blue (similar), <br /> yellow (smaller), red (much smaller)</p> <p>- Fix --request-file stripping query strings from URLs (<a class="issue-link js-issue-link" href="https://github.com/devploit/nomore403/issues/48">#48</a>) <br />- Fix malformed error log in response body close handler</p> <p>- 17 new tests covering all bypass techniques, error handling, <br /> calibration, input validation, and query string preservation</p> github-actions tag:github.com,2008:Repository/401347836/v1.1.8 2025-04-18T18:50:40Z github-actions tag:github.com,2008:Repository/401347836/v1.1.7 2025-04-17T10:54:37Z github-actions tag:github.com,2008:Repository/401347836/v1.1.6 2025-04-17T10:35:01Z github-actions tag:github.com,2008:Repository/401347836/v1.1.5 2025-04-17T10:28:09Z devploit tag:github.com,2008:Repository/401347836/v1.1.4 2025-04-17T09:24:24Z devploit tag:github.com,2008:Repository/401347836/v1.1.3 2025-04-16T18:35:17Z devploit tag:github.com,2008:Repository/401347836/v1.1.2 2025-04-15T13:36:26Z devploit tag:github.com,2008:Repository/401347836/v1.1.1 2025-04-13T17:33:53Z <p>Release v1.1.1: Fix path joining logic and ensure correct handling of…</p> <p>… trailing slashes</p> devploit