v6.1.1

What's Changed

Critical bug fix

• fix: command/flags to prevent subcommand being required by @Ullaakut in #411

Misc

• Bump the all group with 4 updates by @dependabot[bot] in #401
• Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 by @dependabot[bot] in #404
• Bump goreleaser/goreleaser-action from 6 to 7 in the all group by @dependabot[bot] in #402
• feat: add codeowners, fix typos, fix license badge by @Ullaakut in #407
• docs: more precisions in contributing guide by @Ullaakut in #408
• Bump the all group with 2 updates by @dependabot[bot] in #409
• docs: remove config section in favor of wiki, add links to wiki by @Ullaakut in #412

Full Changelog: v6.1.0...v6.1.1

v6.1.0

What's Changed

• fix: always add leading slash to routes by @Ullaakut in #397
• feat: tui mode improvements by @Ullaakut in #395
• feat: add version subcommand to help with issues by @Ullaakut in #400
• feat: add masscan discovery backend by @Ullaakut in #403

Maintenance

• Bump the all group with 3 updates by @dependabot[bot] in #399
• Bump the all group with 4 updates by @dependabot[bot] in #398

New Contributors

• @dependabot[bot] made their first contribution in #399

Full Changelog: v6.0.2...v6.1.0

v6.0.2

What's Changed

• feat: small UI improvements by @Ullaakut in #394
  • Added build metadata support (version, commit, date) with display methods
  • Implemented startup configuration logging for plain/debug mode
  • Added Ctrl+C (SIGINT) handling in TUI mode to gracefully cancel operations
  • Reformatted log output to display timestamp first and normalize log levels to 4 characters
• fix: docker image tags
  • Fixed Docker image tags in goreleaser to include "v" prefix

Full Changelog: v6.0.1...v6.0.2

v6.0.1

What's Changed

• chore: resize cameradar logo by @Ullaakut in #387
• fix: no longer give up on detecting auth type when getting a 401 by @Ullaakut in #391
  • Adds AuthUnknown enum value to gracefully handle unknown/undetected authentication states instead of treating them as fatal errors
  • Implements a custom RTSP DESCRIBE probe (probeDescribeHeaders) that retrieves response headers even on error responses, working around limitations in the gortsplib library
  • Adds fallback authentication detection using case-insensitive substring matching when structured header parsing fails
  • Implements a retry mechanism with 5 attempts for 503 Service Unavailable responses during stream validation
  • Updates route handling to support paths without leading slashes and adds empty route support for default paths

Full Changelog: v6.0.0...v6.0.1

Special thanks to @Vickac2024 for their help with debugging the issue described in #390! 🙏

v6.0.0

Full Changelog: v5.0.3...v6.0.0

Highlights

• Rewrote core scanning and attack flows into modular, testable components with clear interfaces.
• Replaced the legacy curl-based RTSP stack with a Go RTSP client for better reliability and maintainability.
• Introduced a new UI system with TUI, plain, and auto modes, plus progress tracking and summaries.
• Added structured reporting and M3U output generation.

CLI and UX

• Replaced the previous CLI parsing with urfave/cli and improved validation.
• Added --skip-scan mode to bypass discovery and attack known targets directly.
• Added --ui mode selection and enhanced interactive/non-interactive behavior.
• Improved logging and error reporting across steps.

Architecture and Core

• Introduced a new App orchestration layer with explicit dependencies and context-aware execution.
• Added typed steps, progress messages, and summary helpers.
• Added target loading from files and more robust target parsing.
• Added a worker pool to parallelize attacks safely.

Scanning

• Added a scan builder that selects between nmap and skip-scan strategies.
• Implemented nmap scanning with structured parsing and warnings.
• Added robust target expansion and IPv4 range handling.

Attacks

• Implemented a new RTSP attacker with route probing, auth detection, credential attacks, and validation.
• Added re-attack logic for devices with non-standard RTSP behavior.
• Improved authentication detection and route/credential discovery logic.

Dictionaries

• Moved dictionaries into embedded assets and added a new loader.
• Added support for custom dictionary paths with clear error handling.

Output and Reporting

• Added M3U playlist output with labels and RTSP URLs.
• Added plain and TUI reporters with live progress updates.
• Added formatted summaries for accessible and discovered streams.

Build, CI, and Tooling

• Replaced Travis CI with GitHub Actions workflows for build, test, and release.
• Added Dependabot config and GoReleaser v2 configuration.
• Added a Makefile for common tasks (fmt, test, lint, build).
• Updated Dockerfile to use prebuilt binaries and simplified runtime image.

Documentation

• Reworked README with updated usage, security guidance, and examples.
• Added CONTRIBUTING guide and refreshed issue/PR templates.

Tests

• Added extensive tests for the new scanner, attacker, dictionary loader, UI, and helpers.
• Removed legacy tests tied to deleted components and APIs.

v5.4.0 - JSON output support

What's Changed

• feat: write output to file by @Ullaakut in #361

Full Changelog: v5.0.3...v5.0.4

Dictionary update / RU readme

Features

• Update dictionary #326
• Update dictionary by @Mr-xn #346
• Readme RU translation by @VoroninMichael #324
• Better logging for unknown auth types by @baryy100 #345

Fixes

• Fixed typo in loader code #311
• Fixed typo in error by @testwill #332

Add new default credentials

New default credentials

• Add new default credentials
  • #304 by @supremepot
  • #295 by @ArturFormella
• Update install instructions #291 by @Ullaakut

Fix curl dependency

• Update curl-dev dependency version
• Add crossplatform docker builds
• Update README to warn about binary builds and curl version

Multi route stream support

Features

• Support multi-route detection (#264)
  • Change stream model to support multiple routes
  • Simplify attack algorithm
  • Use dummy route to detect cameras which accept all routes
• Set module version to v5 (#265)
  • Update README to reflect changes
  • Various README improvements

Bugfixes

• Fix stream discovery on non-standard ports by using service info mode in nmap scan (#266)
• No longer enables debug by default
• Makes verbose mode work (used to not do anything)

Misc

• Move issue template to .github and remove old changelog file
• Reword error message when no stream is found
• Remove unnecessary import alias