Dev -> Stable 3.0#3079
Open
TheTechromancer wants to merge 1388 commits into
Open
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Contributor
|
I have read the CLA Document and I hereby sign the CLA 0 out of 5 committers have signed the CLA. |
|
I have read the CLA Document and I hereby sign the CLA |
Contributor
🚀 Performance Benchmark Report
📊 Current Results (dev) - Click to expandResults
🐍 Python Version 3.11.15 |
|
I have read the CLA Document and I hereby sign the CLA
…-------- Original Message --------
On Monday, 05/04/26 at 20:07 github-actions[bot] ***@***.***> wrote:
github-actions[bot] left a comment [(blacklanternsecurity/bbot#3079)](#3079 (comment))
🚀 Performance Benchmark Report
> ℹ️ No baseline benchmark data available
>
> Showing current results for dev only.
📊 Current Results (dev) - Click to expand
Results
Test Name Mean Time Ops/sec Min Max
Bloom Filter Dns Mutation Tracking Performance 4.12ms 242.6 ops/sec 4.09ms 4.17ms
Bloom Filter Large Scale Dns Brute Force 17.33ms 57.7 ops/sec 17.17ms 17.63ms
Large Closest Match Lookup 356.76ms 2.8 ops/sec 348.95ms 358.71ms
Realistic Closest Match Workload 191.18ms 5.2 ops/sec 188.25ms 194.24ms
Event Memory Medium Scan 2.197s 0.5 ops/sec 2.087s 2.363s
Event Memory Large Scan 10.850s 0.1 ops/sec 10.624s 11.127s
Event Validation Full Scan Startup Small Batch 406.67ms 2.5 ops/sec 400.26ms 411.14ms
Event Validation Full Scan Startup Large Batch 574.81ms 1.7 ops/sec 567.77ms 579.13ms
Make Event Autodetection Small 31.41ms 31.8 ops/sec 31.33ms 31.50ms
Make Event Autodetection Large 321.98ms 3.1 ops/sec 320.93ms 323.65ms
Make Event Explicit Types 14.09ms 71.0 ops/sec 14.02ms 14.16ms
Excavate Single Thread Small 4.046s 0.2 ops/sec 3.982s 4.082s
Excavate Single Thread Large 9.888s 0.1 ops/sec 9.767s 9.991s
Excavate Parallel Tasks Small 4.178s 0.2 ops/sec 4.125s 4.210s
Excavate Parallel Tasks Large 7.323s 0.1 ops/sec 7.248s 7.354s
Is Ip Performance 3.23ms 310.1 ops/sec 3.18ms 5.11ms
Make Ip Type Performance 11.72ms 85.3 ops/sec 11.62ms 12.58ms
Mixed Ip Operations 4.61ms 216.8 ops/sec 4.56ms 5.01ms
Memory Use Web Crawl 481ns 2079.0K ops/sec 481ns 481ns
Memory Use Subdomain Enum 571ns 1751.3K ops/sec 571ns 571ns
Scan Throughput 100 7.355s 0.1 ops/sec 6.334s 8.383s
Scan Throughput 1000 36.391s 0.0 ops/sec 35.854s 36.995s
Typical Queue Shuffle 64.03µs 15.6K ops/sec 59.64µs 722.31µs
Priority Queue Shuffle 726.13µs 1.4K ops/sec 683.46µs 1.24ms
---------------------------------------------------------------
🐍 Python Version 3.11.15
—
Reply to this email directly, [view it on GitHub](#3079 (comment)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AOIZCEYWQ3LFB2DNG22XZ7T4ZDS7BAVCNFSM6AAAAACYQRYROCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DGNZTG42DCMZWGY).
Triage notifications on the go with GitHub Mobile for [iOS](https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675) or [Android](https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub).
You are receiving this because you were mentioned.Message ID: ***@***.***>
|
Contributor
Code reviewFound 1 issue:
bbot/bbot/modules/internal/dnsresolve.py Lines 118 to 122 in 3501f3a The check in Lines 501 to 506 in 3501f3a The fix is either to use the correct underscore-prefixed name ( 🤖 Generated with Claude Code - If this code review was useful, please react with 👍. Otherwise, react with 👎. |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## stable #3079 +/- ##
========================================
- Coverage 91% 90% -0%
========================================
Files 441 450 +9
Lines 37720 46019 +8299
========================================
+ Hits 34122 41282 +7160
- Misses 3598 4737 +1139 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
… preset, and preset docs
…ity cache poisoning - crypto: filter structured hex IDs (Mongo ObjectIds, hex timestamps, sequential counters) from keystream-reuse detector via tail analysis - cmdi: reject leading-zero arithmetic multiplicands (bash octal divergence) - lightfuzz: restore event type/flags after try_get_as_post conversion passes - lightfuzz: don't cache None connectivity responses (transient failure) - Add 16 regression tests covering all four fixes
More stable because it doesn't depend on nuclei installation, which is tested elsewhere.
…/griffe-gte-1-and-lt-3 Update griffe requirement from <2,>=1 to >=1,<3
Handle malformed YAML gracefully instead of crashing
…actions/dev/github-actions-484570b1b1 Bump codecov/codecov-action from 6 to 7 in the github-actions group
…ents-mar-26 Lightfuzz Overhaul (False-positive reductions, False-negative reductions, many new techniques)
Deduplicate children per parent (set instead of list) so duplicates from the chaos API don't inflate the per-parent cap count and silently drop legitimate subdomains.
collapse PTR-style floods in chaos response
Collaborator
|
recheck |
…h-db gowitness: ephemeral per-batch database
Bump badsecrets to 1.2.1
Tighten lightfuzz false positives
…ceful Graceful cloudcheck error handling + SSL verify passthrough
…imeout-settings Consolidate HTTP timeout settings
Add E2E tests, bump cloudcheck to 11.x
Add optional API key + cursor pagination to certspotter
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.18 to 0.15.20. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.18...0.15.20) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.20 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the github-actions group with 1 update: [actions/cache](https://github.com/actions/cache). Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v5...v6) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
…actions/dev/github-actions-6d1c06d137 Bump actions/cache from 5 to 6 in the github-actions group
The bbot.core.engine framework (EngineBase/EngineClient/EngineServer) is unused since DNS and HTTP moved to blastdns/blasthttp. Reparent WebError/DNSError onto BBOTError and drop the engine doc page.
Remove dead engine code
Run bbot/scripts/docs.py to refresh all generated tables (modules, presets, events, config, flags, output, help, TOC) and the chord-graph data. Sweeps removed modules (wpscan, httpx, ffuf, azure_realm, etc.) and adds new ones (http, webbrute, censys_dns/ip, mongo/kafka/...).
Drop removed VULNERABILITY event type, --allow-deadly flag, and httpx module reference; rename nuclei-intense/lightfuzz-superheavy presets to nuclei-heavy/lightfuzz-max; INFORMATIONAL severity to INFO; wappalyzer dep example to pyOpenSSL.
Regenerate docs/scanning/advanced.md under Python 3.12. Python 3.13+ argparse collapses repeated metavars (-H, --custom-headers CUSTOM_HEADERS), dropping the placeholder after the short flag.
README and CONTRIBUTIONS are GitHub-rendered root files with no docs-site version context; mike publishes only versioned deep links (default: Stable), so these must name a version. Stable matches the rest of the README's links.
Note bbot.core.engine / BBOTEngineError / CurlError removal and WebError/DNSError reparenting; add redact_secrets and waf_bypass; sync cloudcheck/asndb dep bounds.
…changes Add 2.x → 3.0 migration guide
event.md linked to ../../scanning/events (outside docs root); correct to ../scanning/events.md to match other dev pages. Wire the orphaned webbrute deep-dive page into the Modules nav.
…/ruff-0.15.20 Bump ruff from 0.15.18 to 0.15.20
Comprehensive docs update
- filter with is_global instead of is_private so CGNAT/reserved space (no public ASN) isn't looked up - serialize asndb requests via NamedLock so concurrent callers don't stampede the rate-limited bbot.io API
asn: filter non-global IPs and serialize asndb lookups
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
10 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Architecture / Core
Vulnerability / Finding Rework
Blasthttp
DNS
Performance
Lightfuzz
New Modules
Module Fixes / Removals
Config / Presets / Targets
UX / Output
downloadflag to modules #2757 Introduce newdownloadflag to modules by @TrebledJBug Fixes
URL_UNVERIFIEDevent upon detecting http protocols #3068 fingerprintx: emit URL_UNVERIFIED on http protocols by @TrebledJMisc
Merge Conflict Resolution