feroxbuster: add version 2.13.1

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

6 files changed, 201 insertions, 0 deletions

diff --git a/.extras/nvchecker.toml b/.extras/nvchecker.toml
index 24f4e6f..6a86afa 100644
--- a/.extras/nvchecker.toml
+++ b/.extras/nvchecker.toml
@@ -74,3 +74,9 @@ github = "notroj/cadaver"
 use_latest_tag = "true"
 prefix = "v"
 
+[feroxbuster]
+source = "github"
+github = "epi052/feroxbuster"
+use_latest_release = "true"
+prefix = "v"
+
diff --git a/README.md b/README.md
index 8f44602..8811a65 100644
--- a/README.md
+++ b/README.md
@@ -28,6 +28,7 @@ This list is ever growing, if you want to ask for a package to be prioritized, j
 | exploitdb            | ✅                         | [exploit-db.com](https://www.exploit-db.com/)                | 2026-04-30 |
 | cadaver              | ✅                         | [notroj/cadaver](https://notroj.github.io/cadaver/)          | 0.28       |
 | nuclei               | ✅                         | [projectdiscovery/nuclei](https://github.com/projectdiscovery/nuclei) | 3.8.0      |
+| feroxbuster          | ❎                         | [epi052/feroxbuster](https://github.com/epi052/feroxbuster)  | 2.13.1     |
 | windows binaries     | ❎                         | [kali.org](https://www.kali.org/tools/windows-binaries/)     | 0.6.10     |
 | webshells            | ❎                         | [kali.org](https://www.kali.org/tools/webshells/)            | 1.1        |
 | metasploit framework | ❎                         | [metasploit.com](https://www.metasploit.com/)                | 6.4.133   |
diff --git a/feroxbuster/README b/feroxbuster/README
new file mode 100644
index 0000000..7c1956c
--- /dev/null
+++ b/feroxbuster/README
@@ -0,0 +1,23 @@
+feroxbuster is a fast, simple, recursive content discovery tool written
+in Rust. It performs forced browsing, brute forcing URLs with a wordlist
+to enumerate unlinked content (directories, files, backups, and similar
+resources) that a web application does not reference but still serves.
+
+This package is x86_64 only.
+
+Because SlackBuilds.org build hosts have no network access at build
+time, this script does not let cargo fetch crates from the network.
+Instead, a prebuilt vendored-crates tarball
+(feroxbuster-$VERSION-vendor.tar.xz) is downloaded as a second source
+and extracted alongside the upstream source. The build then runs cargo
+in fully offline mode against those vendored crates. The vendored
+tarball is generated from the upstream Cargo.lock at the matching
+release tag, so the dependency set is reproducible.
+
+The sample configuration is installed to:
+  /etc/feroxbuster/ferox-config.toml.new
+Rename it to ferox-config.toml to use it (it is shipped as .new so your
+edits are never overwritten on upgrade).
+
+Shell completions for bash, fish, and zsh are installed if present in
+the upstream release tree.
diff --git a/feroxbuster/feroxbuster.SlackBuild b/feroxbuster/feroxbuster.SlackBuild
new file mode 100644
index 0000000..071bae8
--- /dev/null
+++ b/feroxbuster/feroxbuster.SlackBuild
@@ -0,0 +1,140 @@
+#!/bin/bash
+
+# Slackware build script for feroxbuster
+
+# Copyright 2026 Danilo, Verona, Italy
+# All rights reserved.
+#
+# Redistribution and use of this script, with or without modification, is
+# permitted provided that the following conditions are met:
+#
+# 1. Redistributions of this script must retain the above copyright
+#    notice, this list of conditions and the following disclaimer.
+#
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
+# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
+# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
+# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+cd $(dirname $0) ; CWD=$(pwd)
+
+PRGNAM=feroxbuster
+VERSION=${VERSION:-2.13.1}
+BUILD=${BUILD:-1}
+TAG=${TAG:-_SBo}
+PKGTYPE=${PKGTYPE:-tgz}
+
+# Name of the vendored crates tarball (hosted by the maintainer).
+VENDOR=${PRGNAM}-${VERSION}-vendor
+
+if [ -z "$ARCH" ]; then
+  case "$( uname -m )" in
+    i?86) ARCH=i586 ;;
+    arm*) ARCH=arm ;;
+       *) ARCH=$( uname -m ) ;;
+  esac
+fi
+
+# feroxbuster is only meaningfully supported on x86_64. Bail out clearly
+# on other arches rather than failing deep in the Rust build.
+if [ "$ARCH" != "x86_64" ]; then
+  echo "$PRGNAM is only supported on x86_64."
+  exit 1
+fi
+
+TMP=${TMP:-/tmp/SBo}
+PKG=$TMP/package-$PRGNAM
+OUTPUT=${OUTPUT:-/tmp}
+
+# Rust honors RUSTFLAGS; we don't pass the usual SLKCFLAGS to a C compiler
+# here since cargo drives the build. Release profile handles optimization.
+SLKCFLAGS=""
+LIBDIRSUFFIX="64"
+
+PKGNAM=$PRGNAM # PRINT_PACKAGE_NAME
+if [ "$PRINT_PACKAGE_NAME" ]; then
+  echo "$PKGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE"
+  exit 0
+fi
+
+set -e
+
+rm -rf $PKG
+mkdir -p $TMP $PKG $OUTPUT
+cd $TMP
+rm -rf $PRGNAM-$VERSION
+tar xvf $CWD/$PRGNAM-$VERSION.tar.gz
+cd $PRGNAM-$VERSION
+
+# Unpack the vendored crates alongside the source. The tarball extracts to
+# a top-level vendor/ directory.
+rm -rf vendor
+tar xvf $CWD/$VENDOR.tar.xz
+
+chown -R root:root .
+find -L . \
+  \( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 \
+   -o -perm 511 \) -exec chmod 755 {} \+ -o \
+  \( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \
+   -o -perm 440 -o -perm 400 \) -exec chmod 644 {} \+
+
+# Point cargo at the vendored sources and forbid any network access.
+# The directory is relative to the parent of .cargo/, i.e. the source
+# root, so this is portable across build hosts (no absolute /tmp paths).
+mkdir -p .cargo
+cat > .cargo/config.toml <<EOF
+[source.crates-io]
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendor"
+
+[net]
+offline = true
+EOF
+
+# Build release binary fully offline against the vendored crates.
+# --locked guarantees Cargo.lock is honored and never rewritten.
+export CARGO_HOME="$TMP/$PRGNAM-$VERSION/.cargo"
+cargo build --release --offline --locked
+
+# Install the binary.
+install -D -m 0755 target/release/$PRGNAM $PKG/usr/bin/$PRGNAM
+
+# Shell completions. feroxbuster can emit its own at runtime, but upstream
+# also ships generated ones under shell_completions/ in the release tree.
+if [ -d shell_completions ]; then
+  install -D -m 0644 shell_completions/${PRGNAM}.bash \
+    $PKG/usr/share/bash-completion/completions/$PRGNAM 2>/dev/null || true
+  install -D -m 0644 shell_completions/${PRGNAM}.fish \
+    $PKG/usr/share/fish/vendor_completions.d/${PRGNAM}.fish 2>/dev/null || true
+  install -D -m 0644 shell_completions/_${PRGNAM} \
+    $PKG/usr/share/zsh/site-functions/_${PRGNAM} 2>/dev/null || true
+fi
+
+# Sample configuration, shipped as .new so it never clobbers user edits.
+if [ -f ferox-config.toml.example ]; then
+  install -D -m 0644 ferox-config.toml.example \
+    $PKG/etc/$PRGNAM/ferox-config.toml.new
+fi
+
+# Strip the binary.
+find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" \
+  | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true
+
+mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION
+cp -a CHANGELOG.md LICENSE README.md \
+  $PKG/usr/doc/$PRGNAM-$VERSION 2>/dev/null || true
+cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild
+
+mkdir -p $PKG/install
+cat $CWD/slack-desc > $PKG/install/slack-desc
+
+cd $PKG
+/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE
diff --git a/feroxbuster/feroxbuster.info b/feroxbuster/feroxbuster.info
new file mode 100644
index 0000000..c7be9a5
--- /dev/null
+++ b/feroxbuster/feroxbuster.info
@@ -0,0 +1,12 @@
+PRGNAM="feroxbuster"
+VERSION="2.13.1"
+HOMEPAGE="https://github.com/epi052/feroxbuster"
+DOWNLOAD="UNSUPPORTED"
+MD5SUM=""
+DOWNLOAD_x86_64="https://github.com/epi052/feroxbuster/archive/v2.13.1/feroxbuster-2.13.1.tar.gz \
+                 https://packages.danix.xyz/sbo/feroxbuster/feroxbuster-2.13.1-vendor.tar.xz"
+MD5SUM_x86_64="dc0bfa007f22815875b8094d954c4f60 \
+               3cc65fe23ae6abe30e3299e48f99dccc"
+REQUIRES=""
+MAINTAINER="danix"
+EMAIL="danix@danix.xyz"
diff --git a/feroxbuster/slack-desc b/feroxbuster/slack-desc
new file mode 100644
index 0000000..369eb34
--- /dev/null
+++ b/feroxbuster/slack-desc
@@ -0,0 +1,19 @@
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description.
+# Line up the first '|' above the ':' following the base package name, and
+# the '|' on the right side marks the last column you can put a character in.
+# You must make exactly 11 lines for the formatting to be correct.  It's also
+# customary to leave one space after the ':' except on otherwise blank lines.
+
+           |-----handy-ruler------------------------------------------------------|
+feroxbuster: feroxbuster (fast recursive content discovery tool)
+feroxbuster:
+feroxbuster: feroxbuster is a fast, simple, recursive content discovery tool
+feroxbuster: written in Rust. It performs forced browsing: brute forcing URLs
+feroxbuster: with a wordlist to find unlinked content such as directories,
+feroxbuster: files, backups, and other resources on web servers that are not
+feroxbuster: referenced by the application but remain accessible.
+feroxbuster:
+feroxbuster: Homepage: https://github.com/epi052/feroxbuster
+feroxbuster:
+feroxbuster: