Spaces:

wuhp
/

bbscanner

Running

App Files Files Community

bbscanner / app

Commit History

Nov 3 Today

01:27
Use observed live routes for Arjun and skip missing baseline endpoints Running

Wuhp

3f240f1
01:00
Match native Dalfox budget notices across equivalent root URL forms

Wuhp

bde9c9a
00:53
Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

Wuhp

569f341

Nov 2 Yesterday

23:07
Give Amass startup headroom and distinguish completed policy early stops

Wuhp

b23f8a3
14:26
Fix state-counter pointer validator binding

Wuhp

1f238a1
14:25
Add private bounded race replay and NoSQL HTTP operator checks

Wuhp

561be49
12:48
Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

Wuhp

86a923a
11:51
Add keyless native WAFW00F inventory and supplied-source Semgrep review

Wuhp

54f5b77
11:17
Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

Wuhp

87193e7
10:37
Use native TruffleHog verification across all built-in detectors

Wuhp

72f5723
10:29
Add opt-in bounded TruffleHog provider verification with redacted result states

Wuhp

14929e4
10:12
Tighten delimited input validation and verify format-help outside-click behavior

Wuhp

79252df
10:08
Add direct URL and multi-format target imports with accessible format examples

Wuhp

36f4980
09:38
Deduplicate equivalent origin URLs before selecting extra crawl seeds

Wuhp

bb45949
09:30
Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

Wuhp

83f7729
07:52
Keep the WPScan source label on its skipped preflight result

Wuhp

37ea76f
07:50
Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

Wuhp

4643d92
07:23
Correct indentation of the gated ZAP session reset

Wuhp

a7404f6
07:22
Add optional bounded parallel target scheduling with shared ZAP/cache isolation

Wuhp

29edbf9
06:54
Fix narrow-screen scope controls and keep explicit IDOR references single-target

Wuhp

801e4ce
06:50
Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

Wuhp

92c05f4
06:21
Keep Nettacker DNS validation independent of the Wapiti environment

Wuhp

b4967b3
06:08
Reject ambiguous double-slash paths in template drafts

Wuhp

52cf608
06:06
Complete HF-aware remaining scanner profiles and artifact-aware applicability

Wuhp

1f30e90
05:44
Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

Wuhp

bc6415e
05:22
Install Nikto reporting dependencies and preserve explicit URL ports

Wuhp

1875ecc
05:19
Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

Wuhp

6e9344b
04:11
Preserve timed-out module output and isolate ZAP reporting failures

Wuhp

26abfa8
03:59
Handle nested ZAP passive tasks and validate Dalfox CLI flags in Docker

Wuhp

13b0385
03:57
Detect stalled global ZAP passive queues without masking pending work

Wuhp

1218402
03:56
Bound Dalfox v3 scan phases and reuse same-host Arjun GET parameters

Wuhp

f8be5b6
03:39
Define GAU mode in validated scan options model

Wuhp

61d54de
03:38
Repair Python newline serialization in GAU mode update

Wuhp

4fe43b1
03:36
Add GAU fast balanced mode and opt-in expanded archives with clearer coverage reporting

Wuhp

a854fd4
02:53
Expose actual scanner file exposure candidates in Findings panel

Wuhp

17f5f84
02:52
Wait longer for ZAP passive scans and paginate exact-host alerts

Wuhp

98e9f48
02:51
Run Nuclei exposure templates at web origin and avoid Arjun static manifest targets

Wuhp

2a2d4dc

Nov 1 2 days ago

20:08
Run Nuclei template preflight automatically before queuing scans

Wuhp

910a8c4
20:05
Preflight Nuclei combinations and enforce per-job HTTP request budget

Wuhp

a4faab8
20:00
Read bundled Nuclei template budgets from checkout or container paths

Wuhp

f1f16f6
19:58
Bound combined Nuclei template traffic and report capped coverage

Wuhp

19c3c30
19:57
Allow other scanner modules when Nuclei has no selected templates

Wuhp

85478d9
19:55
Recheck interaction state after async poll before replacing open results

Wuhp

b701fde
19:54
Keep GitHub catalog ref lookup inside active HTTP client lifetime

Wuhp

b326094
19:54
Add preflight validation for selected community Nuclei templates

Wuhp

fd79c19
19:53
Prevent live refresh from interrupting copy or dropdown use and test Nuclei settings

Wuhp

482700b
19:52
Pin community Nuclei template downloads to a valid commit SHA

Wuhp

ac27b1b
19:51
Improve GAU provider failure isolation, skip disabled Wayback and expose coverage

Wuhp

c5ba52b
19:50
Remove duplicate Nuclei settings panels and enforce unique DOM identifiers

Wuhp

57dec19
19:48
Restore configurable Nuclei settings, community search, custom YAML and non-web scope selection

Wuhp

0bf60b2

Commit History

Nov 3 Today

Use observed live routes for Arjun and skip missing baseline endpoints Running

Match native Dalfox budget notices across equivalent root URL forms

Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

Nov 2 Yesterday

Give Amass startup headroom and distinguish completed policy early stops

Fix state-counter pointer validator binding

Add private bounded race replay and NoSQL HTTP operator checks

Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

Add keyless native WAFW00F inventory and supplied-source Semgrep review

Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

Use native TruffleHog verification across all built-in detectors

Add opt-in bounded TruffleHog provider verification with redacted result states

Tighten delimited input validation and verify format-help outside-click behavior

Add direct URL and multi-format target imports with accessible format examples

Deduplicate equivalent origin URLs before selecting extra crawl seeds

Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

Keep the WPScan source label on its skipped preflight result

Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

Correct indentation of the gated ZAP session reset

Add optional bounded parallel target scheduling with shared ZAP/cache isolation

Fix narrow-screen scope controls and keep explicit IDOR references single-target

Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

Keep Nettacker DNS validation independent of the Wapiti environment

Reject ambiguous double-slash paths in template drafts

Complete HF-aware remaining scanner profiles and artifact-aware applicability

Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

Install Nikto reporting dependencies and preserve explicit URL ports

Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

Preserve timed-out module output and isolate ZAP reporting failures

Handle nested ZAP passive tasks and validate Dalfox CLI flags in Docker

Detect stalled global ZAP passive queues without masking pending work

Bound Dalfox v3 scan phases and reuse same-host Arjun GET parameters

Define GAU mode in validated scan options model

Repair Python newline serialization in GAU mode update

Add GAU fast balanced mode and opt-in expanded archives with clearer coverage reporting

Expose actual scanner file exposure candidates in Findings panel

Wait longer for ZAP passive scans and paginate exact-host alerts

Run Nuclei exposure templates at web origin and avoid Arjun static manifest targets

Nov 1 2 days ago

Run Nuclei template preflight automatically before queuing scans

Preflight Nuclei combinations and enforce per-job HTTP request budget

Read bundled Nuclei template budgets from checkout or container paths

Bound combined Nuclei template traffic and report capped coverage

Allow other scanner modules when Nuclei has no selected templates

Recheck interaction state after async poll before replacing open results

Keep GitHub catalog ref lookup inside active HTTP client lifetime

Add preflight validation for selected community Nuclei templates

Prevent live refresh from interrupting copy or dropdown use and test Nuclei settings

Pin community Nuclei template downloads to a valid commit SHA

Improve GAU provider failure isolation, skip disabled Wayback and expose coverage

Remove duplicate Nuclei settings panels and enforce unique DOM identifiers

Restore configurable Nuclei settings, community search, custom YAML and non-web scope selection