Spaces:

wuhp
/

bbscanner

Running

App Files Files Community

bbscanner

Commit History

Nov 3 Today

01:27
Use observed live routes for Arjun and skip missing baseline endpoints Running

Wuhp

3f240f1
01:00
Match native Dalfox budget notices across equivalent root URL forms

Wuhp

bde9c9a
00:58
Resolve application imports in network-disabled native regression smoke

Wuhp

9aa2177
00:54
Update coverage and native-wrapper regression expectations

Wuhp

5c95040
00:53
Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

Wuhp

569f341

Nov 2 Yesterday

23:07
Give Amass startup headroom and distinguish completed policy early stops

Wuhp

b23f8a3
14:27
Verify private replay CLI with mocked transport in offline container

Wuhp

affd5a9
14:26
Fix state-counter pointer validator binding

Wuhp

1f238a1
14:25
Add private bounded race replay and NoSQL HTTP operator checks

Wuhp

561be49
12:48
Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

Wuhp

86a923a
11:51
Add keyless native WAFW00F inventory and supplied-source Semgrep review

Wuhp

54f5b77
11:20
Open advanced settings panels in browser persistence checks

Wuhp

5972477
11:17
Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

Wuhp

87193e7
10:37
Use native TruffleHog verification across all built-in detectors

Wuhp

72f5723
10:29
Add opt-in bounded TruffleHog provider verification with redacted result states

Wuhp

14929e4
10:13
Wait for complete target-import UI updates before asserting selection

Wuhp

4535238
10:12
Tighten delimited input validation and verify format-help outside-click behavior

Wuhp

79252df
10:08
Add direct URL and multi-format target imports with accessible format examples

Wuhp

36f4980
09:38
Deduplicate equivalent origin URLs before selecting extra crawl seeds

Wuhp

bb45949
09:34
Isolate archive cooldown tests and apply queue mocks before app startup

Wuhp

dbc541a
09:30
Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

Wuhp

83f7729
07:52
Keep the WPScan source label on its skipped preflight result

Wuhp

37ea76f
07:50
Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

Wuhp

4643d92
07:23
Correct indentation of the gated ZAP session reset

Wuhp

a7404f6
07:22
Add optional bounded parallel target scheduling with shared ZAP/cache isolation

Wuhp

29edbf9
06:54
Fix narrow-screen scope controls and keep explicit IDOR references single-target

Wuhp

801e4ce
06:51
Pin remote CI runner to Ubuntu 24.04 for supported Chromium checks

Wuhp

e60ade0
06:50
Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

Wuhp

92c05f4
06:21
Keep Nettacker DNS validation independent of the Wapiti environment

Wuhp

b4967b3
06:17
Fix non-root scanner cache ownership and validate bounded helper profiles

Wuhp

55f8933
06:11
Match TruffleHog boolean help syntax and trace offline container checks

Wuhp

b406679
06:08
Reject ambiguous double-slash paths in template drafts

Wuhp

52cf608
06:06
Complete HF-aware remaining scanner profiles and artifact-aware applicability

Wuhp

1f30e90
05:44
Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

Wuhp

bc6415e
05:24
Provide testssl shell and DNS utilities in the HF runtime

Wuhp

2ec3fb3
05:22
Install Nikto reporting dependencies and preserve explicit URL ports

Wuhp

1875ecc
05:19
Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

Wuhp

6e9344b
04:12
Model process exit and pipe closure in timeout regression fixture

Wuhp

86b541a
04:11
Preserve timed-out module output and isolate ZAP reporting failures

Wuhp

26abfa8
03:59
Handle nested ZAP passive tasks and validate Dalfox CLI flags in Docker

Wuhp

13b0385
03:57
Detect stalled global ZAP passive queues without masking pending work

Wuhp

1218402
03:56
Bound Dalfox v3 scan phases and reuse same-host Arjun GET parameters

Wuhp

f8be5b6
03:39
Define GAU mode in validated scan options model

Wuhp

61d54de
03:38
Repair Python newline serialization in GAU mode update

Wuhp

4fe43b1
03:37
Cover balanced GAU no-hit results, expanded fallback and provider cooldowns

Wuhp

f17e4b5
03:36
Add GAU fast balanced mode and opt-in expanded archives with clearer coverage reporting

Wuhp

a854fd4
02:54
Align Nuclei request-budget regression with origin-only exposure profile strategy

Wuhp

6f96bb2
02:53
Expose actual scanner file exposure candidates in Findings panel

Wuhp

17f5f84
02:52
Wait longer for ZAP passive scans and paginate exact-host alerts

Wuhp

98e9f48
02:51
Run Nuclei exposure templates at web origin and avoid Arjun static manifest targets

Wuhp

2a2d4dc

Commit History

Nov 3 Today

Use observed live routes for Arjun and skip missing baseline endpoints Running

Match native Dalfox budget notices across equivalent root URL forms

Resolve application imports in network-disabled native regression smoke

Update coverage and native-wrapper regression expectations

Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

Nov 2 Yesterday

Give Amass startup headroom and distinguish completed policy early stops

Verify private replay CLI with mocked transport in offline container

Fix state-counter pointer validator binding

Add private bounded race replay and NoSQL HTTP operator checks

Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

Add keyless native WAFW00F inventory and supplied-source Semgrep review

Open advanced settings panels in browser persistence checks

Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

Use native TruffleHog verification across all built-in detectors

Add opt-in bounded TruffleHog provider verification with redacted result states

Wait for complete target-import UI updates before asserting selection

Tighten delimited input validation and verify format-help outside-click behavior

Add direct URL and multi-format target imports with accessible format examples

Deduplicate equivalent origin URLs before selecting extra crawl seeds

Isolate archive cooldown tests and apply queue mocks before app startup

Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

Keep the WPScan source label on its skipped preflight result

Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

Correct indentation of the gated ZAP session reset

Add optional bounded parallel target scheduling with shared ZAP/cache isolation

Fix narrow-screen scope controls and keep explicit IDOR references single-target

Pin remote CI runner to Ubuntu 24.04 for supported Chromium checks

Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

Keep Nettacker DNS validation independent of the Wapiti environment

Fix non-root scanner cache ownership and validate bounded helper profiles

Match TruffleHog boolean help syntax and trace offline container checks

Reject ambiguous double-slash paths in template drafts

Complete HF-aware remaining scanner profiles and artifact-aware applicability

Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

Provide testssl shell and DNS utilities in the HF runtime

Install Nikto reporting dependencies and preserve explicit URL ports

Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

Model process exit and pipe closure in timeout regression fixture

Preserve timed-out module output and isolate ZAP reporting failures

Handle nested ZAP passive tasks and validate Dalfox CLI flags in Docker

Detect stalled global ZAP passive queues without masking pending work

Bound Dalfox v3 scan phases and reuse same-host Arjun GET parameters

Define GAU mode in validated scan options model

Repair Python newline serialization in GAU mode update

Cover balanced GAU no-hit results, expanded fallback and provider cooldowns

Add GAU fast balanced mode and opt-in expanded archives with clearer coverage reporting

Align Nuclei request-budget regression with origin-only exposure profile strategy

Expose actual scanner file exposure candidates in Findings panel

Wait longer for ZAP passive scans and paginate exact-host alerts

Run Nuclei exposure templates at web origin and avoid Arjun static manifest targets