{"id":13390898,"url":"https://github.com/lijiejie/BBScan","last_synced_at":"2025-03-13T15:32:19.967Z","repository":{"id":37406081,"uuid":"46107372","full_name":"lijiejie/BBScan","owner":"lijiejie","description":"A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers","archived":false,"fork":false,"pushed_at":"2024-06-19T02:39:33.000Z","size":270,"stargazers_count":2183,"open_issues_count":9,"forks_count":581,"subscribers_count":73,"default_branch":"master","last_synced_at":"2024-10-22T03:40:54.502Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lijiejie.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-11-13T07:41:10.000Z","updated_at":"2024-10-19T10:13:46.000Z","dependencies_parsed_at":"2022-07-08T17:47:59.034Z","dependency_job_id":"81b12f9c-c3b6-487c-b419-1fce84a44fb4","html_url":"https://github.com/lijiejie/BBScan","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lijiejie%2FBBScan","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lijiejie%2FBBScan/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lijiejie%2FBBScan/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lijiejie%2FBBScan/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lijiejie","download_url":"https://codeload.github.com/lijiejie/BBScan/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":221380092,"owners_count":16809020,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-30T14:01:37.013Z","updated_at":"2024-10-25T03:30:51.829Z","avatar_url":"https://github.com/lijiejie.png","language":"Python","funding_links":[],"categories":["Python","others"],"sub_categories":[],"readme":"# BBScan 3.0 #\n\n`BBScan` 是一个高并发的、轻量级的Web漏洞扫描工具。它帮助安全工程师从大量目标中，快速发现，定位可能存在弱点的目标，辅助半自动化测试。\n\n`BBScan` is a fast and light-weight web vulnerability scanner. It helps pen-testers pinpoint possibly vulnerable targets from a large number of web servers.\n\n* Scan common web vulnerabilities: **Data Leaks** / **Directory Traversal** /  **Admin Backends**\n* Extract **API Endpoints** from .js file, Scan **Token/Secrets/Pass/Key Leaks**\n* Recognize **Web Fingerprints**: web frameworks, programming languages, CMS,  middle-ware, open source software or commercial product name \n\n### Test Reports \n\nBrute sub names for *.baidu.com *.qq.com *.bytedance.com with [subDomainsBrute](https://github.com/lijiejie/subDomainsBrute) and then \n\nsend the output files to BBScan,  scan reports are as shown below\n\n* [qq.com_report.html](https://www.lijiejie.com/python/BBScan/qq.com_report.html)      \n\n* [bytedance.com_report.html](https://www.lijiejie.com/python/BBScan/bytedance.com_report.html)       \n\n* [baidu.com_report.html](https://www.lijiejie.com/python/BBScan/baidu.com_report.html)\n\n### Install ###\n\nRequire Python 3.6+\n\n\tpip3 install -r requirements.txt\n\n### Chang Log\n\n* **2024-05-27** \n  * **New Features**：\n    * CMS识别功能，Web指纹来自 [FingerprintHub](https://github.com/0x727/FingerprintHub)  Credit to [@0x727](https://github.com/0x727)\n    * JavaScript解析支持，提取拼接API接口，支持检测Key/Secret/Token泄露\n    * 通过正则表达式提取URL，From: https://github.com/Threezh1/JSFinder  Credit to [@Threezh1](https://github.com/Threezh1)\n  * **减少漏报**：优化减少DNS查询次数，提高稳定性\n  * **减少误报**：优化了误报验证逻辑\n  * ``**界面优化**：输出更加易用的Web报告\n\n### Usage\n\n* ##### Scan from file\n\n```\npython BBScan.py -f urls.txt --api\n```\n\n* **Scan from command line**\n\n```\npython BBScan.py --host www.test.com https://test2.com http://test3.com:8080 10.1.2.3\n```\n\n* ##### Scan with specified rules only\n\n```\npython BBScan.py --rule git_and_svn -f urls.txt\n```\n\n### Key Arguments   ###\n\n* `--network MASK`    \n\n  You scan involve other IPs under the same network to a scan\n\n  * `--host www.baidu.com --network 24`\n  * `-f urls.txt --network 28`\n\n* `--fp, --fingerprint`\n\n  Under this mode, only fingerprint scan performed only, this helps to save some time by disable rule/script based scan.\n\n* `--api`\n\n  Gather and display all API interfaces extracted from .js file\n  \n* `--skip, --skip-intranet`\n\n  Skip scanning private IP targets. \n\n```\t(venv_py) python BBScan.py\n\tusage: BBScan.py [options]\n\t\n\t\n\t\n\tTargets:\n\t\n\t  --host [HOST [HOST ...]]\n\t                        Scan several hosts from command line\n\t  -f TargetFile         Load new line delimited targets from TargetFile\n\t  -d TargetDirectory    Load all *.txt files from TargetDirectory\n\t  --crawler CrawlDirectory\n\t                        Load all *.log crawl files from CrawlDirectory\n\t  --network MASK        Scan all Target/MASK neighbour hosts,\n\t                        should be an integer between 8 and 31\n\t  --skip, --skip-intranet\n\t                        Do not scan private IPs, when you are not under the same network with the target\n\t\n\tRule Based SCAN:\n\t\n\t  --rule [RuleFileName [RuleFileName ...]]\n\t                        Import specified rule files only.\n\t  -n, --no-crawl        No crawling, sub folders will not be processed\n\t  --no-check404         No HTTP 404 existence check\n\t  --full                Process all sub directories\n\t  --fp, --fingerprint   Disable rule and script scan, only check fingerprint\n\t\n\tScript Based SCAN:\n\t\n\t  --scripts-only        Scan with user scripts only\n\t  --script [ScriptName [ScriptName ...]]\n\t                        Execute specified scripts only\n\t  --no-scripts          Disable all scripts\n\t\n\tCONCURRENT:\n\t\n\t  -p PROCESS            Num of processes running concurrently, 30 by default\n\t  -t THREADS            Num of scan threads for each scan process, 3 by default\n\t\n\tOTHER:\n\t\n\t  --proxy Proxy         Set HTTP proxy server\n\t  --timeout Timeout     Max scan minutes for each target, 10 by default\n\t  --api                 Gather and display all API interfaces extracted from .js file\n\t  --save-ports PortsDataFile\n\t                        Save open ports to PortsDataFile\n\t  --debug               Show verbose debug info\n\t  --no-browser          Do not open web browser to view report\n\t\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flijiejie%2FBBScan","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flijiejie%2FBBScan","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flijiejie%2FBBScan/lists"}