Rewrite vhost module as virtualhost with native blasthttp

bbot/core/event/base.py

@@ -2005,6 +2005,31 @@ def _data_human(self):
         return tech
 
 
+class VIRTUAL_HOST(DictHostEvent):
+    class _data_validator(BaseModel):
+        host: str
+        virtual_host: str
+        url: Optional[str] = None
+        description: Optional[str] = None
+        ip: Optional[str] = None
+        _validate_url = field_validator("url")(validators.validate_url)
+        _validate_host = field_validator("host")(validators.validate_host)
+
+    def _data_id(self):
+        virtual_host = self.data.get("virtual_host", "")
+        return f"{self.host}:{virtual_host}"
+
+    def _pretty_string(self):
+        return self.data.get("virtual_host", "")
+
+    def _data_human(self):
+        virtual_host = self.data.get("virtual_host", "")
+        url = self.data.get("url", "")
+        if url:
+            return f"{virtual_host} ({url})"
+        return virtual_host
+
+
 class PROTOCOL(DictHostEvent):
     class _data_validator(BaseModel):
         host: str

bbot/core/helpers/simhash.py

@@ -11,10 +11,11 @@ def __init__(self, bits=64):
     @staticmethod
     def compute_simhash(text, bits=64, truncate=True, normalization_filter=None):
         """
-        Static method for computing SimHash that can be used with multiprocessing.
+        Static method for computing a SimHash fingerprint.
 
-        This method is designed to be used with run_in_executor_mp() for CPU-intensive
-        SimHash computations across multiple processes.
+        Designed to be called via run_in_executor_cpu(): the work is short and the
+        input is truncated to ~3KB inside the helper, so a thread pool avoids the
+        pickle/spawn overhead of a process pool.
 
         Args:
             text (str): The text to hash

bbot/errors.py

@@ -38,10 +38,6 @@ class WordlistError(BBOTError):
     pass
 
 
-class CurlError(BBOTError):
-    pass
-
-
 class PresetNotFoundError(BBOTError):
     pass
 

bbot/modules/generic_ssrf.py

@@ -123,8 +123,7 @@ async def test(self, event):
         post_data_list = [(subdomain_tag, post_data), (subdomain_tag_lower, post_data_lower)]
 
         for tag, pd in post_data_list:
-            # Send raw body (not URL-encoded) so payload URLs like http://... reach the
-            # server literally — matching old curl -d behavior.
+            # Send raw body (not URL-encoded) so payload URLs like http://... reach the server literally.
             raw_body = "&".join(f"{k}={v}" for k, v in pd.items())
             r = await self.generic_ssrf.helpers.request(url=test_url, method="POST", body=raw_body)
             if r: