Hugging Face's logo

Spaces:
wuhp
/
bbscanner
Running

App Files Community
bbscanner / tests

Commit History

Today

  1. Forward required program identity even when it matches the default agent literal Running

    Wuhp
    de031c2

  2. Keep derived scope candidates compact and analyze their source instructions once

    Wuhp
    a304c7a

  3. Preserve program identity, broaden compatible root-scope pipelines and remove 100-target cap

    Wuhp
    75874b2

  4. Fix keyless WPScan, Arjun parameter 404 handling and discovery identity policy checks

    Wuhp
    bc2250b

  5. Integrate compact bounty browser into scope and fix reusable identity setup

    Wuhp
    d26fe65

Yesterday

  1. Use SQLmap's advertised identity option and verify installed parser offline

    Wuhp
    e740b41

  2. Keep published URL scope constraints in exact-URL discovery scan profiles

    Wuhp
    0bb6d07

  3. Handle quoted policy identity literals and explicit automation bans

    Wuhp
    afed9d6

  4. Add bbcollect bounty discovery and program-specific scope/rule enforcement

    Wuhp
    ed48607

  5. Use observed live routes for Arjun and skip missing baseline endpoints

    Wuhp
    3f240f1

  6. Match native Dalfox budget notices across equivalent root URL forms

    Wuhp
    bde9c9a

  7. Resolve application imports in network-disabled native regression smoke

    Wuhp
    9aa2177

  8. Update coverage and native-wrapper regression expectations

    Wuhp
    5c95040

  9. Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage

    Wuhp
    569f341

2 days ago

  1. Give Amass startup headroom and distinguish completed policy early stops

    Wuhp
    b23f8a3

  2. Verify private replay CLI with mocked transport in offline container

    Wuhp
    affd5a9

  3. Add private bounded race replay and NoSQL HTTP operator checks

    Wuhp
    561be49

  4. Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews

    Wuhp
    86a923a

  5. Add keyless native WAFW00F inventory and supplied-source Semgrep review

    Wuhp
    54f5b77

  6. Open advanced settings panels in browser persistence checks

    Wuhp
    5972477

  7. Extend bounded ZAP passive waits and persist upgrade-safe browser preferences

    Wuhp
    87193e7

  8. Use native TruffleHog verification across all built-in detectors

    Wuhp
    72f5723

  9. Add opt-in bounded TruffleHog provider verification with redacted result states

    Wuhp
    14929e4

  10. Wait for complete target-import UI updates before asserting selection

    Wuhp
    4535238

  11. Tighten delimited input validation and verify format-help outside-click behavior

    Wuhp
    79252df

  12. Add direct URL and multi-format target imports with accessible format examples

    Wuhp
    36f4980

  13. Deduplicate equivalent origin URLs before selecting extra crawl seeds

    Wuhp
    bb45949

  14. Isolate archive cooldown tests and apply queue mocks before app startup

    Wuhp
    dbc541a

  15. Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles

    Wuhp
    83f7729

  16. Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics

    Wuhp
    4643d92

  17. Add optional bounded parallel target scheduling with shared ZAP/cache isolation

    Wuhp
    29edbf9

  18. Fix narrow-screen scope controls and keep explicit IDOR references single-target

    Wuhp
    801e4ce

  19. Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs

    Wuhp
    92c05f4

  20. Fix non-root scanner cache ownership and validate bounded helper profiles

    Wuhp
    55f8933

  21. Complete HF-aware remaining scanner profiles and artifact-aware applicability

    Wuhp
    1f30e90

  22. Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks

    Wuhp
    bc6415e

  23. Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules

    Wuhp
    6e9344b

  24. Model process exit and pipe closure in timeout regression fixture

    Wuhp
    86b541a

  25. Preserve timed-out module output and isolate ZAP reporting failures

    Wuhp
    26abfa8

  26. Handle nested ZAP passive tasks and validate Dalfox CLI flags in Docker

    Wuhp
    13b0385

  27. Detect stalled global ZAP passive queues without masking pending work

    Wuhp
    1218402

  28. Bound Dalfox v3 scan phases and reuse same-host Arjun GET parameters

    Wuhp
    f8be5b6

  29. Cover balanced GAU no-hit results, expanded fallback and provider cooldowns

    Wuhp
    f17e4b5

  30. Align Nuclei request-budget regression with origin-only exposure profile strategy

    Wuhp
    6f96bb2

  31. Expose actual scanner file exposure candidates in Findings panel

    Wuhp
    17f5f84

  32. Wait longer for ZAP passive scans and paginate exact-host alerts

    Wuhp
    98e9f48

  33. Run Nuclei exposure templates at web origin and avoid Arjun static manifest targets

    Wuhp
    2a2d4dc

3 days ago

  1. Run Nuclei template preflight automatically before queuing scans

    Wuhp
    910a8c4

  2. Preflight Nuclei combinations and enforce per-job HTTP request budget

    Wuhp
    a4faab8

  3. Bound combined Nuclei template traffic and report capped coverage

    Wuhp
    19c3c30