Spaces:

wuhp
/

bbscanner

Running

App Files Files Community

bbscanner

Commit History

Nov 4 Today

01:53
Forward required program identity even when it matches the default agent literal Running

Wuhp

de031c2
01:51
Keep derived scope candidates compact and analyze their source instructions once

Wuhp

a304c7a
01:48
Preserve program identity, broaden compatible root-scope pipelines and remove 100-target cap

Wuhp

75874b2
01:17
Fix keyless WPScan, Arjun parameter 404 handling and discovery identity policy checks

Wuhp

bc2250b
00:21
Integrate compact bounty browser into scope and fix reusable identity setup

Wuhp

d26fe65

Nov 3 Yesterday

23:29
Use SQLmap's advertised identity option and verify installed parser offline

Wuhp

e740b41
23:24
Keep published URL scope constraints in exact-URL discovery scan profiles

Wuhp

0bb6d07
23:20
Correct literal escaping in no-automation policy matcher

Wuhp

ffd461c
23:20
Handle quoted policy identity literals and explicit automation bans

Wuhp

afed9d6
23:17
Preserve requested pipeline order when applying program constraints

Wuhp

c0f946c
23:16
Add bbcollect bounty discovery and program-specific scope/rule enforcement

Wuhp

ed48607
01:27
Use observed live routes for Arjun and skip missing baseline endpoints

Wuhp

3f240f1
01:00
Match native Dalfox budget notices across equivalent root URL forms

Wuhp

bde9c9a
00:58
Resolve application imports in network-disabled native regression smoke

Wuhp

9aa2177
00:54
Update coverage and native-wrapper regression expectations

Wuhp

5c95040
00:53
Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

Wuhp

569f341

Nov 2 2 days ago

23:07
Give Amass startup headroom and distinguish completed policy early stops

Wuhp

b23f8a3
14:27
Verify private replay CLI with mocked transport in offline container

Wuhp

affd5a9
14:26
Fix state-counter pointer validator binding

Wuhp

1f238a1
14:25
Add private bounded race replay and NoSQL HTTP operator checks

Wuhp

561be49
12:48
Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

Wuhp

86a923a
11:51
Add keyless native WAFW00F inventory and supplied-source Semgrep review

Wuhp

54f5b77
11:20
Open advanced settings panels in browser persistence checks

Wuhp

5972477
11:17
Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

Wuhp

87193e7
10:37
Use native TruffleHog verification across all built-in detectors

Wuhp

72f5723
10:29
Add opt-in bounded TruffleHog provider verification with redacted result states

Wuhp

14929e4
10:13
Wait for complete target-import UI updates before asserting selection

Wuhp

4535238
10:12
Tighten delimited input validation and verify format-help outside-click behavior

Wuhp

79252df
10:08
Add direct URL and multi-format target imports with accessible format examples

Wuhp

36f4980
09:38
Deduplicate equivalent origin URLs before selecting extra crawl seeds

Wuhp

bb45949
09:34
Isolate archive cooldown tests and apply queue mocks before app startup

Wuhp

dbc541a
09:30
Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

Wuhp

83f7729
07:52
Keep the WPScan source label on its skipped preflight result

Wuhp

37ea76f
07:50
Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

Wuhp

4643d92
07:23
Correct indentation of the gated ZAP session reset

Wuhp

a7404f6
07:22
Add optional bounded parallel target scheduling with shared ZAP/cache isolation

Wuhp

29edbf9
06:54
Fix narrow-screen scope controls and keep explicit IDOR references single-target

Wuhp

801e4ce
06:51
Pin remote CI runner to Ubuntu 24.04 for supported Chromium checks

Wuhp

e60ade0
06:50
Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

Wuhp

92c05f4
06:21
Keep Nettacker DNS validation independent of the Wapiti environment

Wuhp

b4967b3
06:17
Fix non-root scanner cache ownership and validate bounded helper profiles

Wuhp

55f8933
06:11
Match TruffleHog boolean help syntax and trace offline container checks

Wuhp

b406679
06:08
Reject ambiguous double-slash paths in template drafts

Wuhp

52cf608
06:06
Complete HF-aware remaining scanner profiles and artifact-aware applicability

Wuhp

1f30e90
05:44
Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

Wuhp

bc6415e
05:24
Provide testssl shell and DNS utilities in the HF runtime

Wuhp

2ec3fb3
05:22
Install Nikto reporting dependencies and preserve explicit URL ports

Wuhp

1875ecc
05:19
Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

Wuhp

6e9344b
04:12
Model process exit and pipe closure in timeout regression fixture

Wuhp

86b541a
04:11
Preserve timed-out module output and isolate ZAP reporting failures

Wuhp

26abfa8

Commit History

Nov 4 Today

Forward required program identity even when it matches the default agent literal Running

Keep derived scope candidates compact and analyze their source instructions once

Preserve program identity, broaden compatible root-scope pipelines and remove 100-target cap

Fix keyless WPScan, Arjun parameter 404 handling and discovery identity policy checks

Integrate compact bounty browser into scope and fix reusable identity setup

Nov 3 Yesterday

Use SQLmap's advertised identity option and verify installed parser offline

Keep published URL scope constraints in exact-URL discovery scan profiles

Correct literal escaping in no-automation policy matcher

Handle quoted policy identity literals and explicit automation bans

Preserve requested pipeline order when applying program constraints

Add bbcollect bounty discovery and program-specific scope/rule enforcement

Use observed live routes for Arjun and skip missing baseline endpoints

Match native Dalfox budget notices across equivalent root URL forms

Resolve application imports in network-disabled native regression smoke

Update coverage and native-wrapper regression expectations

Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

Nov 2 2 days ago

Give Amass startup headroom and distinguish completed policy early stops

Verify private replay CLI with mocked transport in offline container

Fix state-counter pointer validator binding

Add private bounded race replay and NoSQL HTTP operator checks

Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

Add keyless native WAFW00F inventory and supplied-source Semgrep review

Open advanced settings panels in browser persistence checks

Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

Use native TruffleHog verification across all built-in detectors

Add opt-in bounded TruffleHog provider verification with redacted result states

Wait for complete target-import UI updates before asserting selection

Tighten delimited input validation and verify format-help outside-click behavior

Add direct URL and multi-format target imports with accessible format examples

Deduplicate equivalent origin URLs before selecting extra crawl seeds

Isolate archive cooldown tests and apply queue mocks before app startup

Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

Keep the WPScan source label on its skipped preflight result

Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

Correct indentation of the gated ZAP session reset

Add optional bounded parallel target scheduling with shared ZAP/cache isolation

Fix narrow-screen scope controls and keep explicit IDOR references single-target

Pin remote CI runner to Ubuntu 24.04 for supported Chromium checks

Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

Keep Nettacker DNS validation independent of the Wapiti environment

Fix non-root scanner cache ownership and validate bounded helper profiles

Match TruffleHog boolean help syntax and trace offline container checks

Reject ambiguous double-slash paths in template drafts

Complete HF-aware remaining scanner profiles and artifact-aware applicability

Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

Provide testssl shell and DNS utilities in the HF runtime

Install Nikto reporting dependencies and preserve explicit URL ports

Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

Model process exit and pipe closure in timeout regression fixture

Preserve timed-out module output and isolate ZAP reporting failures