Skip to content

SubEcho v1.1 - Expanded WAF Detection & Enhanced UI

Latest

Choose a tag to compare

@jokokucing jokokucing released this 15 Jan 17:20
· 1 commit to main since this release

SubEcho v1.1 - Expanded WAF Detection & Enhanced UI

New Features

  • Expanded WAF Detection:
    • Added support for detecting additional WAFs, including Wix, Framer, Squarespace, Shopify, Radware, Citrix NetScaler, Imperva SecureSphere, Distil Networks, Kemp Technologies, F5 ASM, and ModSecurity.
  • Improved HTTP Handling:
    • Introduced a SafeGetContext asynchronous context manager for robust HTTP GET requests with retry mechanisms.
    • Added support for disabling SSL/TLS verification when required.

Enhancements

  • User Interface (UI):
    • Redesigned Rich-based UI elements for a better user experience:
      • Improved ASCII banner display with enhanced styling and version information.
      • Introduced visually distinct progress bars with spinners and percentage completion for:
        • Subdomain enumeration.
        • Domain status checking (online/offline).
        • WAF detection.
      • Enhanced table formatting for displaying results:
        • Clearly separates online, offline, and WAF-protected subdomains.
        • Added color-coded indicators (e.g., green for online, red for offline, orange for WAF-protected).
      • Results panel includes file location of saved results for easier access.
  • Verbose Logging:
    • Redesigned verbose logs for clarity:
      • Filtered out redundant or irrelevant messages.
      • Highlighted errors, warnings, and critical actions in distinct colors.

Performance Improvements

  • Subdomain Enumeration:
    • Streamlined fetchers for crt.sh, SecurityTrails, RapidDNS, WebArchive, AlienVault OTX, HackerTarget, and urlscan.io for faster and more reliable subdomain retrieval.
  • Concurrency Enhancements:
    • Added rate limiting for domain status checks and WAF detection using asynchronous semaphores to ensure stability under heavy workloads.

Bug Fixes

  • Fixed issues with handling certain invalid domain formats during subdomain parsing.
  • Addressed potential Unicode errors when processing domain names.