bbot 2.3.0.5414rc0__tar.gz → 2.3.0.5423rc0__tar.gz

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: bbot
-Version: 2.3.0.5414rc0
+Version: 2.3.0.5423rc0
 Summary: OSINT automation for hackers.
 Home-page: https://github.com/blacklanternsecurity/bbot
 License: GPL-3.0

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/__init__.py

@@ -1,4 +1,4 @@
 # version placeholder (replaced by poetry-dynamic-versioning)
-__version__ = "v2.3.0.5414rc"
+__version__ = "v2.3.0.5423rc"
 
 from .scanner import Scanner, Preset

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/modules/deadly/nuclei.py

@@ -15,7 +15,7 @@ class nuclei(BaseModule):
     }
 
     options = {
-        "version": "3.3.6",
+        "version": "3.3.7",
         "tags": "",
         "templates": "",
         "severity": "",

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/modules/internal/dnsresolve.py

@@ -83,9 +83,14 @@ class DNSResolve(BaseInterceptModule):
                     event_data_changed = await self.handle_wildcard_event(main_host_event)
                     if event_data_changed:
                         # since data has changed, we check again whether it's a duplicate
-                        if event.type == "DNS_NAME" and self.scan.ingress_module.is_incoming_duplicate(event, add=True):
+                        if event.type == "DNS_NAME" and self.scan.ingress_module.is_incoming_duplicate(
+                            event, add=True
+                        ):
                             if not event._graph_important:
-                                return False, "it's a DNS wildcard, and its module already emitted a similar wildcard event"
+                                return (
+                                    False,
+                                    "it's a DNS wildcard, and its module already emitted a similar wildcard event",
+                                )
                             else:
                                 self.debug(
                                     f"Event {event} was already emitted by its module, but it's graph-important so it gets a pass"

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/modules/internal/excavate.py

@@ -656,8 +656,10 @@ class excavate(BaseInternalModule, BaseInterceptModule):
                         continue
                     if parsed_url.scheme in ["http", "https"]:
                         continue
+
                     def abort_if(e):
                         return e.scope_distance > 0
+
                     finding_data = {"host": str(host), "description": f"Non-HTTP URI: {parsed_url.geturl()}"}
                     await self.report(finding_data, event, yara_rule_settings, discovery_context, abort_if=abort_if)
                     protocol_data = {"protocol": parsed_url.scheme, "host": str(host)}

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/modules/trufflehog.py

@@ -13,7 +13,7 @@ class trufflehog(BaseModule):
     }
 
     options = {
-        "version": "3.84.1",
+        "version": "3.84.2",
         "config": "",
         "only_verified": True,
         "concurrency": 8,

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/scanner/target.py

@@ -192,7 +192,6 @@ class ScanBlacklist(ACLTarget):
     @special_target_type(r"^(?:RE|REGEX):(.*)")
     def handle_regex(self, match):
         pattern = match.group(1)
-        log.info(f"Blacklisting by custom regex: {pattern}")
         blacklist_regex = re.compile(pattern, re.IGNORECASE)
         self.blacklist_regexes.add(blacklist_regex)
         return []
@@ -225,6 +224,12 @@ class ScanBlacklist(ACLTarget):
         hosts = [str(h).encode() for h in self.sorted_hosts]
         return hosts + regex_patterns
 
+    def __len__(self):
+        return super().__len__() + len(self.blacklist_regexes)
+
+    def __bool__(self):
+        return bool(len(self))
+
 
 class BBOTTarget:
     """

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/bbot/test/test_step_1/test_target.py

@@ -395,6 +395,7 @@ async def test_blacklist_regex(bbot_scanner, bbot_httpserver):
         config={"excavate": True},
         debug=True,
     )
+    assert len(scan.target.blacklist) == 2
     assert scan.target.blacklist.blacklist_regexes
     assert {r.pattern for r in scan.target.blacklist.blacklist_regexes} == {
         r"evil[0-9]{3}",

{bbot-2.3.0.5414rc0 → bbot-2.3.0.5423rc0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "bbot"
-version = "v2.3.0.5414rc"
+version = "v2.3.0.5423rc"
 description = "OSINT automation for hackers."
 authors = [
     "TheTechromancer",