bbot 2.4.2.6611rc0__py3-none-any.whl → 2.4.2.6621rc0__py3-none-any.whl

bbot/__init__.py

@@ -1,5 +1,5 @@
 # version placeholder (replaced by poetry-dynamic-versioning)
-__version__ = "v2.4.2.6611rc"
+__version__ = "v2.4.2.6621rc"
 
 from .scanner import Scanner, Preset
 

bbot/modules/dehashed.py

@@ -13,23 +13,23 @@ class dehashed(subdomain_enum):
         "author": "@SpamFaux",
         "auth_required": True,
     }
-    options = {"username": "", "api_key": ""}
-    options_desc = {"username": "Email Address associated with your API key", "api_key": "DeHashed API Key"}
+    options = {"api_key": ""}
+    options_desc = {"api_key": "DeHashed API Key"}
     target_only = True
 
-    base_url = "https://api.dehashed.com/search"
+    base_url = "https://api.dehashed.com/v2/search"
 
     async def setup(self):
-        self.username = self.config.get("username", "")
         self.api_key = self.config.get("api_key", "")
-        self.auth = (self.username, self.api_key)
         self.headers = {
             "Accept": "application/json",
+            "Content-Type": "application/json",
+            "Dehashed-Api-Key": self.api_key,
         }
 
         # soft-fail if we don't have the necessary information to make queries
-        if not (self.username and self.api_key):
-            return None, "No username / API key set"
+        if not self.api_key:
+            return None, "No API key set"
 
         return await super().setup()
 
@@ -38,29 +38,31 @@ class dehashed(subdomain_enum):
         async for entries in self.query(query):
             for entry in entries:
                 # we have to clean up the email field because dehashed does a poor job of it
-                email_str = entry.get("email", "").replace("\\", "")
-                found_emails = list(await self.helpers.re.extract_emails(email_str))
-                if not found_emails:
-                    self.debug(f"Invalid email from dehashed.com: {email_str}")
-                    continue
-                email = found_emails[0]
+                emails = []
+                for email in entry.get("email", []):
+                    email_str = email.replace("\\", "")
+                    found_emails = list(await self.helpers.re.extract_emails(email_str))
+                    if not found_emails:
+                        self.debug(f"Invalid email from dehashed.com: {email_str}")
+                        continue
+                    emails += found_emails
 
-                user = entry.get("username", "")
-                pw = entry.get("password", "")
-                h_pw = entry.get("hashed_password", "")
+                users = entry.get("username", [])
+                pws = entry.get("password", [])
+                h_pws = entry.get("hashed_password", [])
                 db_name = entry.get("database_name", "")
 
                 tags = []
                 if db_name:
                     tags = [f"db-{db_name}"]
-                if email:
+                for email in emails:
                     email_event = self.make_event(email, "EMAIL_ADDRESS", parent=event, tags=tags)
                     if email_event is not None:
                         await self.emit_event(
                             email_event,
                             context=f'{{module}} searched API for "{query}" and found {{event.type}}: {{event.data}}',
                         )
-                        if user:
+                        for user in users:
                             await self.emit_event(
                                 f"{email}:{user}",
                                 "USERNAME",
@@ -68,7 +70,7 @@ class dehashed(subdomain_enum):
                                 tags=tags,
                                 context=f"{{module}} found {email} with {{event.type}}: {{event.data}}",
                             )
-                        if pw:
+                        for pw in pws:
                             await self.emit_event(
                                 f"{email}:{pw}",
                                 "PASSWORD",
@@ -76,7 +78,7 @@ class dehashed(subdomain_enum):
                                 tags=tags,
                                 context=f"{{module}} found {email} with {{event.type}}: {{event.data}}",
                             )
-                        if h_pw:
+                        for h_pw in h_pws:
                             await self.emit_event(
                                 f"{email}:{h_pw}",
                                 "HASHED_PASSWORD",
@@ -86,30 +88,33 @@ class dehashed(subdomain_enum):
                             )
 
     async def query(self, domain):
-        query = f"domain:{domain}"
-        url = f"{self.base_url}?query={query}&size=10000&page=" + "{page}"
-        page = 0
-        num_entries = 0
-        agen = self.api_page_iter(url=url, auth=self.auth, headers=self.headers, _json=False)
+        url = self.base_url
+        json = {
+            "query": "",
+            "page": 1,
+            "size": 10000,  # The maximum permitted size and pagination.
+        }
+        json["query"] = f"domain:{domain}"
+        json["page"] = 1
+        max_pages = 1
+        agen = self.api_page_iter(url=url, headers=self.headers, _json=False, method="POST", json=json)
         async for result in agen:
             result_json = {}
             with suppress(Exception):
                 result_json = result.json()
             total = result_json.get("total", 0)
             entries = result_json.get("entries", [])
-            if entries is None:
-                entries = []
-            num_entries += len(entries)
-            page += 1
-            if (page >= 3) or (not entries):
-                if result is not None and result.status_code != 200:
-                    self.warning(
-                        f"Error retrieving results from dehashed.com (status code {result.status_code}): {result.text}"
-                    )
-                elif (page >= 3) and (total > num_entries):
-                    self.info(
-                        f"{domain} has {total:,} results in Dehashed. The API can only process the first 30,000 results. Please check dehashed.com to get the remaining results."
-                    )
+            json["page"] += 1
+            if result is not None and result.status_code != 200:
+                self.warning(
+                    f"Error retrieving results from dehashed.com (status code {result.status_code}): {result.text}"
+                )
+            elif (json["page"] > max_pages) and (total > (json["size"] * max_pages)):
+                self.info(
+                    f"{domain} has {total:,} results in Dehashed. The API can only process the first 10,000 results. Please check dehashed.com to get the remaining results."
+                )
+            if entries:
+                yield entries
+            if not entries or json["page"] > max_pages:
                 await agen.aclose()
                 break
-            yield entries

bbot/modules/github_usersearch.py

@@ -0,0 +1,75 @@
+from bbot.modules.templates.github import github
+from bbot.modules.templates.subdomain_enum import subdomain_enum
+
+
+class github_usersearch(github, subdomain_enum):
+    watched_events = ["DNS_NAME"]
+    produced_events = ["SOCIAL", "EMAIL_ADDRESS"]
+    flags = ["passive", "safe", "code-enum"]
+    meta = {
+        "description": "Query Github's API for users with emails matching in scope domains that may not be discoverable by listing members of the organization.",
+        "created_date": "2025-05-10",
+        "author": "@domwhewell-sage",
+        "auth_required": True,
+    }
+    options = {"api_key": ""}
+    options_desc = {"api_key": "Github token"}
+
+    async def handle_event(self, event):
+        self.verbose("Searching for users with emails matching in scope domains")
+        query = self.make_query(event)
+        users = await self.query_users(query)
+        for user, email in users:
+            user_url = f"https://github.com/{user}"
+            event_data = {"platform": "github", "profile_name": user, "url": user_url}
+            user_event = self.make_event(event_data, "SOCIAL", tags="github-org-member", parent=event)
+            if user_event:
+                await self.emit_event(
+                    user_event,
+                    context=f"{{module}} searched for users with {{DNS_NAME}} in the profile and discovered {{event.type}}: {user_url}",
+                )
+            if email:
+                await self.emit_event(
+                    email,
+                    "EMAIL_ADDRESS",
+                    parent=event,
+                    context=f"{{module}} found an {{event.type}} on the github profile {user_url}: {{event.data}}",
+                )
+
+    async def query_users(self, query):
+        users = []
+        graphql_query = f"""query search_users {{
+            search(query: "{query}", type: USER, first: 100, after: "{{NEXT_KEY}}") {{
+                userCount
+                pageInfo {{
+                    hasNextPage
+                    endCursor
+                }}
+                edges {{
+                    node {{
+                        ... on User {{
+                          login
+                          # bio Commented out as user can add arbritrary domains to their bio
+                          email # Email is verified by github
+                          websiteUrl # Website is not verified by github
+                        }}
+                    }}
+                }}
+            }}
+        }}"""
+        async for data in self.github_graphql_request(graphql_query, "search"):
+            if data:
+                user_count = data.get("userCount", 0)
+                self.verbose(f"Found {user_count} users with the query {query}, verifying if they are in-scope...")
+                edges = data.get("edges", [])
+                for node in edges:
+                    user = node.get("node", {})
+                    in_scope_hosts = await self.scan.extract_in_scope_hostnames(str(user))
+                    if in_scope_hosts:
+                        login = user.get("login", "")
+                        email = user.get("email", None)
+                        self.verbose(
+                            f'Found in-scope hostname(s): "{in_scope_hosts}" in the profile https://github.com/{login}, the profile appears to be in-scope'
+                        )
+                        users.append((login, email))
+        return users

bbot/modules/templates/github.py

@@ -44,3 +44,31 @@ class github(BaseModule):
             self.trace(traceback.format_exc())
             return None, f"Error with API ({str(e).strip()})"
         return True
+
+    async def github_graphql_request(self, graphql_query, resp_key):
+        url = f"{self.base_url}/graphql"
+        next_key = ""
+        has_next_page = True
+
+        while has_next_page:
+            query = graphql_query.replace("{NEXT_KEY}", next_key)
+            r = await self.api_request(url, method="POST", json={"query": query})
+            if r is None:
+                break
+            status_code = getattr(r, "status_code", 0)
+            if status_code == 403:
+                self.warning("Github is rate-limiting us (HTTP status: 403)")
+                break
+            try:
+                json = r.json()
+            except Exception as e:
+                self.warning(f"Failed to decode JSON for {r.url} (HTTP status: {status_code}): {e}")
+                break
+
+            data = json.get("data", {}).get(resp_key, {})
+            yield data
+
+            # Update pagination variables
+            page_info = data.get("pageInfo", {})
+            has_next_page = page_info.get("hasNextPage", False)
+            next_key = page_info.get("endCursor", "")

bbot/test/test_step_2/module_tests/test_module_dehashed.py

@@ -1,52 +1,44 @@
 from .base import ModuleTestBase
 
-dehashed_domain_response = {
-    "balance": 10000,
-    "entries": [
-        {
-            "id": "4363462346",
-            "email": "bob@blacklanternsecurity.com",
-            "ip_address": "",
-            "username": "bob@bob.com",
-            "password": "",
-            "hashed_password": "$2a$12$pVmwJ7pXEr3mE.DmCCE4fOUDdeadbeefd2KuCy/tq1ZUFyEOH2bve",
-            "name": "Bob Smith",
-            "vin": "",
-            "address": "",
-            "phone": "+91283423839",
-            "database_name": "eatstreet",
-        },
-        {
-            "id": "234623453454",
-            "email": "tim@blacklanternsecurity.com",
-            "ip_address": "",
-            "username": "timmy",
-            "password": "TimTamSlam69",
-            "hashed_password": "",
-            "name": "Tim Tam",
-            "vin": "",
-            "address": "",
-            "phone": "+123455667",
-            "database_name": "eatstreet",
-        },
-    ],
-    "success": True,
-    "took": "61µs",
-    "total": 2,
-}
-
 
 class TestDehashed(ModuleTestBase):
     modules_overrides = ["dehashed", "speculate"]
     config_overrides = {
         "scope": {"report_distance": 2},
-        "modules": {"dehashed": {"username": "admin", "api_key": "deadbeef"}},
+        "modules": {"dehashed": {"api_key": "deadbeef"}},
     }
 
     async def setup_before_prep(self, module_test):
         module_test.httpx_mock.add_response(
-            url="https://api.dehashed.com/search?query=domain:blacklanternsecurity.com&size=10000&page=1",
-            json=dehashed_domain_response,
+            url="https://api.dehashed.com/v2/search",
+            method="POST",
+            json={
+                "balance": 10000,
+                "entries": [
+                    {
+                        "id": "4363462346",
+                        "email": ["bob@blacklanternsecurity.com"],
+                        "ip_address": ["127.0.0.9"],
+                        "username": ["bob@bob.com"],
+                        "hashed_password": ["$2a$12$pVmwJ7pXEr3mE.DmCCE4fOUDdeadbeefd2KuCy/tq1ZUFyEOH2bve"],
+                        "name": ["Bob Smith"],
+                        "phone": ["+91283423839"],
+                        "database_name": "eatstreet",
+                        "raw_record": {"le_only": True, "unstructured": True},
+                    },
+                    {
+                        "id": "234623453454",
+                        "email": ["tim@blacklanternsecurity.com"],
+                        "username": ["timmy"],
+                        "password": ["TimTamSlam69"],
+                        "name": "Tim Tam",
+                        "phone": ["+123455667"],
+                        "database_name": "eatstreet",
+                    },
+                ],
+                "took": "61ms",
+                "total": 2,
+            },
         )
         await module_test.mock_dns(
             {
@@ -100,3 +92,68 @@ class TestDehashed(ModuleTestBase):
             [e for e in events if e.type == "PASSWORD" and e.data == "tim@blacklanternsecurity.com:TimTamSlam69"]
         )
         assert 1 == len([e for e in events if e.type == "USERNAME" and e.data == "tim@blacklanternsecurity.com:timmy"])
+
+
+class TestDehashedBadEmail(TestDehashed):
+    async def setup_before_prep(self, module_test):
+        module_test.httpx_mock.add_response(
+            url="https://api.dehashed.com/v2/search",
+            method="POST",
+            json={
+                "balance": 10000,
+                "entries": [
+                    {
+                        "id": "EZxg4Lz-INLUt6uRXZaV",
+                        "email": ["foo.example.com"],
+                        "database_name": "Collections",
+                    },
+                ],
+                "took": "41ms",
+                "total": 1,
+            },
+        )
+
+    def check(self, module_test, events):
+        debug_log_content = open(module_test.scan.home / "debug.log").read()
+        assert "Invalid email from dehashed.com: foo.example.com" in debug_log_content
+
+
+class TestDehashedHTTPError(TestDehashed):
+    async def setup_before_prep(self, module_test):
+        module_test.httpx_mock.add_response(
+            url="https://api.dehashed.com/v2/search",
+            method="POST",
+            json={"error": "issue with request body"},
+            status_code=400,
+        )
+
+    def check(self, module_test, events):
+        scan_log_content = open(module_test.scan.home / "scan.log").read()
+        assert (
+            'Error retrieving results from dehashed.com (status code 400): {"error":"issue with request body"}'
+            in scan_log_content
+        )
+
+
+class TestDehashedTooManyResults(TestDehashed):
+    async def setup_before_prep(self, module_test):
+        module_test.httpx_mock.add_response(
+            url="https://api.dehashed.com/v2/search",
+            method="POST",
+            json={
+                "balance": 10000,
+                "entries": [
+                    {
+                        "id": "VXhNxj46SGsW4Lworh-G",
+                        "email": ["bob@bob.com"],
+                        "database_name": "Collections",
+                    },
+                ],
+                "took": "40ms",
+                "total": 10001,
+            },
+        )
+
+    def check(self, module_test, events):
+        scan_log_content = open(module_test.scan.home / "scan.log").read()
+        assert "has 10,001 results in Dehashed. The API can only process the first 10,000 results." in scan_log_content

bbot/test/test_step_2/module_tests/test_module_github_usersearch.py

@@ -0,0 +1,138 @@
+from .base import ModuleTestBase
+
+
+class TestGithub_Usersearch(ModuleTestBase):
+    config_overrides = {"modules": {"github_usersearch": {"api_key": "asdf"}}}
+    query_1 = """query search_users {
+            search(query: "blacklanternsecurity.com", type: USER, first: 100, after: "") {
+                userCount
+                pageInfo {
+                    hasNextPage
+                    endCursor
+                }
+                edges {
+                    node {
+                        ... on User {
+                          login
+                          # bio Commented out as user can add arbritrary domains to their bio
+                          email # Email is verified by github
+                          websiteUrl # Website is not verified by github
+                        }
+                    }
+                }
+            }
+        }"""
+    query_2 = """query search_users {
+            search(query: "blacklanternsecurity.com", type: USER, first: 100, after: "Y3Vyc29yOjUz") {
+                userCount
+                pageInfo {
+                    hasNextPage
+                    endCursor
+                }
+                edges {
+                    node {
+                        ... on User {
+                          login
+                          # bio Commented out as user can add arbritrary domains to their bio
+                          email # Email is verified by github
+                          websiteUrl # Website is not verified by github
+                        }
+                    }
+                }
+            }
+        }"""
+
+    async def setup_before_prep(self, module_test):
+        module_test.httpx_mock.add_response(url="https://api.github.com/zen")
+        module_test.httpx_mock.add_response(
+            url="https://api.github.com/graphql",
+            match_headers={"Authorization": "token asdf"},
+            match_json={"query": self.query_1},
+            json={
+                "data": {
+                    "search": {
+                        "userCount": 2,
+                        "pageInfo": {"hasNextPage": True, "endCursor": "Y3Vyc29yOjUz"},
+                        "edges": [
+                            {
+                                "node": {
+                                    "login": "user_one",
+                                    "email": "test@blacklanternsecurity.com",
+                                    "websiteUrl": None,
+                                }
+                            },
+                            {"node": {"login": "user_two", "email": None, "websiteUrl": None}},
+                        ],
+                    }
+                }
+            },
+        )
+        module_test.httpx_mock.add_response(
+            url="https://api.github.com/graphql",
+            match_headers={"Authorization": "token asdf"},
+            match_json={"query": self.query_2},
+            json={
+                "data": {
+                    "search": {
+                        "userCount": 1,
+                        "pageInfo": {"hasNextPage": False, "endCursor": "Y3Vyc29yOjU"},
+                        "edges": [
+                            {
+                                "node": {
+                                    "login": "user_three",
+                                    "email": None,
+                                    "websiteUrl": "https://blog.blacklanternsecurity.com",
+                                }
+                            }
+                        ],
+                    }
+                }
+            },
+        )
+
+    def check(self, module_test, events):
+        assert 1 == len(
+            [
+                e
+                for e in events
+                if e.type == "SOCIAL"
+                and e.data["platform"] == "github"
+                and e.data["profile_name"] == "user_one"
+                and str(e.module) == "github_usersearch"
+                and "github-org-member" in e.tags
+                and e.scope_distance == 1
+            ]
+        ), "Failed to find user_one github"
+        assert 1 == len(
+            [
+                e
+                for e in events
+                if e.type == "EMAIL_ADDRESS"
+                and e.data == "test@blacklanternsecurity.com"
+                and str(e.module) == "github_usersearch"
+            ]
+        ), "Failed to find email address for user_one"
+        assert 0 == len(
+            [
+                e
+                for e in events
+                if e.type == "SOCIAL"
+                and e.data["platform"] == "github"
+                and e.data["profile_name"] == "user_two"
+                and str(e.module) == "github_usersearch"
+                and "github-org-member" in e.tags
+                and e.scope_distance == 1
+            ]
+        ), "user_two should not be in scope due to no email or website"
+        assert 1 == len(
+            [
+                e
+                for e in events
+                if e.type == "SOCIAL"
+                and e.data["platform"] == "github"
+                and e.data["profile_name"] == "user_three"
+                and str(e.module) == "github_usersearch"
+                and "github-org-member" in e.tags
+                and e.scope_distance == 1
+            ]
+        ), "Failed to find user_three github"

{bbot-2.4.2.6611rc0.dist-info → bbot-2.4.2.6621rc0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: bbot
-Version: 2.4.2.6611rc0
+Version: 2.4.2.6621rc0
 Summary: OSINT automation for hackers.
 License: GPL-3.0
 Keywords: python,cli,automation,osint,threat-intel,intelligence,neo4j,scanner,python-library,hacking,recursion,pentesting,recon,command-line-tool,bugbounty,subdomains,security-tools,subdomain-scanner,osint-framework,attack-surface,subdomain-enumeration,osint-tool

{bbot-2.4.2.6611rc0.dist-info → bbot-2.4.2.6621rc0.dist-info}/RECORD

@@ -1,4 +1,4 @@
-bbot/__init__.py,sha256=Sj6Ww0s5mr9AjzAEu-u6gU8g5aBo7xw-OHJg-aVo95Q,163
+bbot/__init__.py,sha256=DK7EeAVAAynkbWC2Q4Rv1ao4pXjaeTKcViVbLcWeK0Q,163
 bbot/cli.py,sha256=1QJbANVw9Q3GFM92H2QRV2ds5756ulm08CDZwzwPpeI,11888
 bbot/core/__init__.py,sha256=l255GJE_DvUnWvrRb0J5lG-iMztJ8zVvoweDOfegGtI,46
 bbot/core/config/__init__.py,sha256=zYNw2Me6tsEr8hOOkLb4BQ97GB7Kis2k--G81S8vofU,342
@@ -83,7 +83,7 @@ bbot/modules/code_repository.py,sha256=x70Z45VnNNMF8BPkHfGWZXsZXw_fStGB3y0-8jbP1
 bbot/modules/credshed.py,sha256=HAF5wgRGKIIpdMAe4mIAtkZRLmFYjMFyXtjjst6RJ20,4203
 bbot/modules/crt.py,sha256=6Zm90VKXwYYN6Sab0gwwhTARrtnQIqALJTVtFWMMTGk,1369
 bbot/modules/crt_db.py,sha256=xaIm2457_xGJjnKss73l1HpPn7pLPHksVzejsimTfZA,2198
-bbot/modules/dehashed.py,sha256=iyzWHmJs6zC7FsRhw9_AdkckQKCf_0oNnL9RwG409r0,5071
+bbot/modules/dehashed.py,sha256=0lzcqMEgwRmprwurZ2-8Y8aOO4KTueJgpY_vh0DWQwA,5155
 bbot/modules/digitorus.py,sha256=XQY0eAQrA7yo8S57tGncP1ARud-yG4LiWxx5VBYID34,1027
 bbot/modules/dnsbimi.py,sha256=A4cqhvhytmEEd-tY4CgFwMLbsVtMjkRY9238Aj8aVtU,6921
 bbot/modules/dnsbrute.py,sha256=Y2bSbG2IcwIJID1FSQ6Qe9fdpWwG7GIO-wVQw7MdQFM,2439
@@ -108,6 +108,7 @@ bbot/modules/git_clone.py,sha256=XFZXx0k97EMY3E5PZzdNvqQzZddOfRMaVp5ol2gk11s,246
 bbot/modules/gitdumper.py,sha256=XBYt6oSXm09FJVdH37zrn9T1Nhqc0zK4KLugMevedOw,11531
 bbot/modules/github_codesearch.py,sha256=a-r2vE9N9WyBpFUiKCsg0TK4Qn7DaEGyVRTUKzkDLWA,3641
 bbot/modules/github_org.py,sha256=WM18vJCHuOHJJ5rPzQzQ3Pmp7XPPuaMeVgNfW-FlO0k,8938
+bbot/modules/github_usersearch.py,sha256=G8knkQBJsn7EKcMhcEaFPiB_Y5S96e2VaseBubsqOyk,3407
 bbot/modules/github_workflows.py,sha256=RDtzR0DC2sqiWzMtiqlrCSwtZHWL2MoIJBKd6LVTAdI,9720
 bbot/modules/gitlab.py,sha256=9oWWpBijeHCjuFBfWW4HvNqt7bvJvrBgBjaaz_UPPnE,5964
 bbot/modules/google_playstore.py,sha256=N4QjzQag_bgDXfX17rytBiiWA-SQtYI2N0J_ZNEOdv0,3701
@@ -199,7 +200,7 @@ bbot/modules/subdomaincenter.py,sha256=aWjcIqGGWnAj2ePwcS4sgUJDUsq0trY3Klhr_lcc4
 bbot/modules/subdomainradar.py,sha256=YlRNMtNGLpa13KZ7aksAMVZdSjxe1tkywU5RXlwXpPc,6784
 bbot/modules/telerik.py,sha256=i9Zy2JZXLrmwSslFzVFVWApQNwTwNcrGsb_UxBuCtkI,18905
 bbot/modules/templates/bucket.py,sha256=muLPpfAGtcNhL0tLU-qHTlTNIz4yncRcVjdZMqVRtUI,7153
-bbot/modules/templates/github.py,sha256=n6cVjf62ezkztCRAcXNnlxfCkB0VRWqn138mOOt6T08,1454
+bbot/modules/templates/github.py,sha256=lrV1EYPqjtPkJsS0fQfqmLvGchNo_fO3A75W9-03gxY,2531
 bbot/modules/templates/postman.py,sha256=MIpz2q_r6LP0kIEgByo7oX5qHhMZLOhr7oKzJI9Beec,6959
 bbot/modules/templates/shodan.py,sha256=MXBvlmfw3jZFqT47v10UkqMSyQR-zBIxMJmK7PWw6uw,1174
 bbot/modules/templates/sql.py,sha256=o-CdyyoJvHJdJBKkj3CIGXYxUta4w2AB_2Vr-k7cDDU,3553
@@ -329,7 +330,7 @@ bbot/test/test_step_2/module_tests/test_module_credshed.py,sha256=ipkCFL7YmZBLWW
 bbot/test/test_step_2/module_tests/test_module_crt.py,sha256=V15tE1jcXdXJEzEEdAJvSMRWhKBFtxBBUJ_eewvV3U4,717
 bbot/test/test_step_2/module_tests/test_module_crt_db.py,sha256=R0CvLnzhN5T7XNPVSDRYD9vSwYMTNED6w-EPGoWPVII,849
 bbot/test/test_step_2/module_tests/test_module_csv.py,sha256=UJqMqdiPjx-UjJw10OoVMAj378wu5mWIq0v04TCljTM,579
-bbot/test/test_step_2/module_tests/test_module_dehashed.py,sha256=BZ0LFO4xBwDsXzsqjZCYRMTbXdwwUEma2OeJh8YQIEs,3625
+bbot/test/test_step_2/module_tests/test_module_dehashed.py,sha256=Oi2McmPf873xWWUahYNh-CquDfLFamATyODjAZL33vU,6009
 bbot/test/test_step_2/module_tests/test_module_digitorus.py,sha256=1GwxQGny6TxHsV8Fx7cR-aaLU8ZZkcF065VM_XoG1Hs,1612
 bbot/test/test_step_2/module_tests/test_module_discord.py,sha256=Z66fGb-kkdZTQfUh6WZiM35Ad-gDyvwxlA7mUUB2vnQ,1838
 bbot/test/test_step_2/module_tests/test_module_dnsbimi.py,sha256=nAhNAuH2hS7r4KYzhuPMocae1ifoIRMESYio8L577lg,4393
@@ -358,6 +359,7 @@ bbot/test/test_step_2/module_tests/test_module_git_clone.py,sha256=Mo0Q7bCXcrkGW
 bbot/test/test_step_2/module_tests/test_module_gitdumper.py,sha256=ya_eQUQk0344G7iqBYMls2z5H-bYM87rydbz-ACR2Ng,17461
 bbot/test/test_step_2/module_tests/test_module_github_codesearch.py,sha256=M50xBiGG2EuPGXDJU6uFsSUE-fhqZl3CzYtNdszW7LM,4735
 bbot/test/test_step_2/module_tests/test_module_github_org.py,sha256=5tKO6NH4TPBeIdeTf7Bz9PUZ1pcvKsjrG0nFhc3YgT0,25458
+bbot/test/test_step_2/module_tests/test_module_github_usersearch.py,sha256=IIQ0tYZjQN8_L8u_N4m8Nz3kbB4IyBp95tYCPcQeScg,5264
 bbot/test/test_step_2/module_tests/test_module_github_workflows.py,sha256=o_teEaskm3H22QEKod5KJayFvvcgOQoG4eItGWv8C8E,38006
 bbot/test/test_step_2/module_tests/test_module_gitlab.py,sha256=fnwE7BWTU6EQquKdGLCiaX_LwVwvzOLev3Y9GheTLSY,11859
 bbot/test/test_step_2/module_tests/test_module_google_playstore.py,sha256=uTRqpAGI9HI-rOk_6jdV44OoSqi0QQQ3aTVzvuV0dtc,3034
@@ -448,8 +450,8 @@ bbot/wordlists/raft-small-extensions-lowercase_CLEANED.txt,sha256=ZSIVebs7ptMvHx
 bbot/wordlists/top_open_ports_nmap.txt,sha256=LmdFYkfapSxn1pVuQC2LkOIY2hMLgG-Xts7DVtYzweM,42727
 bbot/wordlists/valid_url_schemes.txt,sha256=0B_VAr9Dv7aYhwi6JSBDU-3M76vNtzN0qEC_RNLo7HE,3310
 bbot/wordlists/wordninja_dns.txt.gz,sha256=DYHvvfW0TvzrVwyprqODAk4tGOxv5ezNmCPSdPuDUnQ,570241
-bbot-2.4.2.6611rc0.dist-info/LICENSE,sha256=GzeCzK17hhQQDNow0_r0L8OfLpeTKQjFQwBQU7ZUymg,32473
-bbot-2.4.2.6611rc0.dist-info/METADATA,sha256=LDoYczD9e_LGiKrrwmi9WHdJDFoT_v57p5oNaJAFfIc,18308
-bbot-2.4.2.6611rc0.dist-info/WHEEL,sha256=fGIA9gx4Qxk2KDKeNJCbOEwSrmLtjWCwzBz351GyrPQ,88
-bbot-2.4.2.6611rc0.dist-info/entry_points.txt,sha256=cWjvcU_lLrzzJgjcjF7yeGuRA_eDS8pQ-kmPUAyOBfo,38
-bbot-2.4.2.6611rc0.dist-info/RECORD,,
+bbot-2.4.2.6621rc0.dist-info/LICENSE,sha256=GzeCzK17hhQQDNow0_r0L8OfLpeTKQjFQwBQU7ZUymg,32473
+bbot-2.4.2.6621rc0.dist-info/METADATA,sha256=XpdUo5_30J3J3EJUgjM3a3VpninDPABYKWDJRVqxvqk,18308
+bbot-2.4.2.6621rc0.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
+bbot-2.4.2.6621rc0.dist-info/entry_points.txt,sha256=cWjvcU_lLrzzJgjcjF7yeGuRA_eDS8pQ-kmPUAyOBfo,38
+bbot-2.4.2.6621rc0.dist-info/RECORD,,

{bbot-2.4.2.6611rc0.dist-info → bbot-2.4.2.6621rc0.dist-info}/WHEEL

@@ -1,4 +1,4 @@
 Wheel-Version: 1.0
-Generator: poetry-core 2.1.2
+Generator: poetry-core 2.1.3
 Root-Is-Purelib: true
 Tag: py3-none-any