Skip to content

Conversation

@soerlemans
Copy link

Implemented rate limiting for short scan.
Let me know if you have any remarks pertaining to the feature implementation.

Another note it seems the source code has not been formatted using go fmt?

@soerlemans
Copy link
Author

soerlemans commented Dec 1, 2024

Changed rate limit value from float to integer.

@soerlemans
Copy link
Author

@bitquark ping for review

@irsdl
Copy link

irsdl commented Dec 31, 2024

This sounds like a good addition.

@irsdl
Copy link

irsdl commented Dec 31, 2024

@soerlemans can we use this to send a request every 2 seconds? If not, it is probably better to introduce throttles so it can wait some seconds based on the user input in between each request.

@soerlemans
Copy link
Author

@irsdl I tried it with a float before but faced some issues in commit: afd7091
I could reimplement if its desired.

@soerlemans
Copy link
Author

@irsdl I changed the rate limit flag to support fractals.
Specifying -r 0.2 will send a request every 5 seconds.
Something more complex could be implemented, like ffuf -p flag

-p                  Seconds of `delay` between requests, or a range of random delay. For example "0.1" or "0.1-2.0"

But this would require more time to implement and this is a feature I have wanted for a long time.
As currently shortscan just spams a target during bugbounty which is not desirable.

irsdl added a commit to irsdl/shortscan that referenced this pull request Oct 21, 2025
irsdl added a commit to irsdl/shortscan that referenced this pull request Oct 21, 2025
- Fixed merge conflict between PR bitquark#23 and PR bitquark#16
- Added case-insensitive matching for bin::$INDEX_ALLOCATION
- Changed session identifier from (S(x)) to (S(d)) for WAF evasion
- Implemented -R flag for relaxed match mode (tentative matches)
  * Useful for Jakarta/CFM files loaded via 8.3 filenames
  * Tentative matches shown in yellow with [tentative] label
  * JSON output includes 'tentative' field
- Updated README with custom enhancements documentation
- Added usage examples for new features
- Code formatting improvements (gofmt)
irsdl added a commit to irsdl/shortscan that referenced this pull request Oct 21, 2025
This custom version identifier reflects the enhanced fork with:
- Applied upstream PRs (bitquark#16, bitquark#23, bitquark#24)
- Custom enhancements (relaxed match mode, multiple wordlists, etc.)
- WAF evasion improvements
- Case-insensitive INDEX_ALLOCATION handling

Version format: upstream_version-fork_identifier.increment
Example: 0.9.2-irsdl.1 = based on upstream 0.9.2, irsdl fork iteration 1

Note: shortutil version remains 0.4 (unchanged from upstream)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants