Skip to content

Merge stable into dev (resolve conflicts for #3079) #3198

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
liquidsec merged 23 commits into from
Jun 17, 2026
Merged

Merge stable into dev (resolve conflicts for #3079) #3198

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
cb07d80
Replace CLA workflow with centralized reusable workflow
aconite33 Jun 12, 2026
b55ce74
Merge pull request #3169 from aconite33/cherry-pick-cla-reusable
liquidsec Jun 12, 2026
a66e180
Add permissions block to CLA caller workflow
aconite33 Jun 12, 2026
64310b3
Merge pull request #3170 from aconite33/fix/cla-caller-permissions
liquidsec Jun 12, 2026
16d9c42
Reject symlinks in github_workflows output path before mkdir
liquidsec Jun 15, 2026
d07d27b
Bump version to 2.8.5
liquidsec Jun 15, 2026
4df6f48
Bump dependencies to clear CVE alerts
liquidsec Jun 15, 2026
35edd44
Bump trufflehog to 3.95.5, stop removing .git/index in sanitize_git_repo
liquidsec Jun 13, 2026
dacf70a
Fix test failures, bump badsecrets and baddns to latest compatible ve…
liquidsec Jun 16, 2026
b34d49b
Remove dead modules: azure_realm, digitorus, passivetotal, sitedossier
liquidsec Jun 16, 2026
c2f4bc0
Harden docker_pull WWW-Authenticate parsing and realm validation
liquidsec Jun 15, 2026
ccbd5be
Add path traversal check to unarchive module
liquidsec Jun 15, 2026
8da468a
Pin PyJWT<2.13 to fix badsecrets JWT detection
liquidsec Jun 16, 2026
84d2fa3
Cap supported Python at 3.13, drop 3.14 from CI
liquidsec Jun 16, 2026
017be19
Move PyJWT <2.13 pin from badsecrets deps_pip to pyproject.toml
liquidsec Jun 16, 2026
904a8fb
Regenerate docs
liquidsec Jun 16, 2026
627b139
Update docs for 2.8.5: Python 3.10 min, add release history entry
liquidsec Jun 16, 2026
1d3a299
Merge commit from fork
liquidsec Jun 16, 2026
dfc0b16
Merge commit from fork
liquidsec Jun 16, 2026
7b25b46
Merge commit from fork
liquidsec Jun 16, 2026
24ad6ae
Add defense-in-depth hardenings, fix docker_pull test mock
liquidsec Jun 16, 2026
cb923f5
Merge pull request #3185 from blacklanternsecurity/security-patches-j…
liquidsec Jun 16, 2026
283ab14
Merge stable into dev, resolve conflicts
liquidsec Jun 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[![bbot_banner](https://github.com/user-attachments/assets/f02804ce-9478-4f1e-ac4d-9cf5620a3214)](https://github.com/blacklanternsecurity/bbot)

[![Python Version](https://img.shields.io/badge/python-3.9+-FF8400)](https://www.python.org) [![License](https://img.shields.io/badge/license-AGPLv3-FF8400.svg)](https://github.com/blacklanternsecurity/bbot/blob/dev/LICENSE) [![DEF CON Recon Village 2024](https://img.shields.io/badge/DEF%20CON%20Demo%20Labs-2023-FF8400.svg)](https://www.reconvillage.org/talks) [![PyPi Downloads](https://static.pepy.tech/personalized-badge/bbot?right_color=orange&left_color=grey)](https://pepy.tech/project/bbot) [![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff) [![Tests](https://github.com/blacklanternsecurity/bbot/actions/workflows/tests.yml/badge.svg?branch=stable)](https://github.com/blacklanternsecurity/bbot/actions?query=workflow%3A"tests") [![Codecov](https://codecov.io/gh/blacklanternsecurity/bbot/branch/dev/graph/badge.svg?token=IR5AZBDM5K)](https://codecov.io/gh/blacklanternsecurity/bbot) [![Discord](https://img.shields.io/discord/859164869970362439)](https://discord.com/invite/PZqkgxu5SA)
[![Python Version](https://img.shields.io/badge/python-3.10+-FF8400)](https://www.python.org) [![License](https://img.shields.io/badge/license-AGPLv3-FF8400.svg)](https://github.com/blacklanternsecurity/bbot/blob/dev/LICENSE) [![DEF CON Recon Village 2024](https://img.shields.io/badge/DEF%20CON%20Demo%20Labs-2023-FF8400.svg)](https://www.reconvillage.org/talks) [![PyPi Downloads](https://static.pepy.tech/personalized-badge/bbot?right_color=orange&left_color=grey)](https://pepy.tech/project/bbot) [![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff) [![Tests](https://github.com/blacklanternsecurity/bbot/actions/workflows/tests.yml/badge.svg?branch=stable)](https://github.com/blacklanternsecurity/bbot/actions?query=workflow%3A"tests") [![Codecov](https://codecov.io/gh/blacklanternsecurity/bbot/branch/dev/graph/badge.svg?token=IR5AZBDM5K)](https://codecov.io/gh/blacklanternsecurity/bbot) [![Discord](https://img.shields.io/discord/859164869970362439)](https://discord.com/invite/PZqkgxu5SA)

### **BEE·bot** is a multipurpose scanner inspired by [Spiderfoot](https://github.com/smicallef/spiderfoot), built to automate your **Recon**, **Bug Bounties**, and **ASM**!

Expand Down
16 changes: 16 additions & 0 deletions docs/release_history.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,19 @@
### 2.8.5 - Jun 16, 2026
- 2.8.5 is expected to be the last 2.x release. Supported Python versions: 3.10-3.13.
- [https://github.com/blacklanternsecurity/bbot/pull/3185](https://github.com/blacklanternsecurity/bbot/pull/3185)

### 2.8.4 - Mar 17, 2026
- [https://github.com/blacklanternsecurity/bbot/pull/2971](https://github.com/blacklanternsecurity/bbot/pull/2971)

### 2.8.3 - Feb 26, 2026
- [https://github.com/blacklanternsecurity/bbot/pull/2922](https://github.com/blacklanternsecurity/bbot/pull/2922)

### 2.8.2 - Feb 12, 2026
- [https://github.com/blacklanternsecurity/bbot/pull/2899](https://github.com/blacklanternsecurity/bbot/pull/2899)

### 2.8.1 - Jan 30, 2026
- [https://github.com/blacklanternsecurity/bbot/pull/2888](https://github.com/blacklanternsecurity/bbot/pull/2888)

### 2.8.0 - Jan 20, 2026
- [https://github.com/blacklanternsecurity/bbot/pull/2760](https://github.com/blacklanternsecurity/bbot/pull/2760)

Expand Down
2 changes: 1 addition & 1 deletion docs/scanning/configuration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -643,7 +643,7 @@ In addition to the stated options for each module, the following universal optio
| modules.trufflehog.config | str | File path or URL to YAML trufflehog config | |
| modules.trufflehog.deleted_forks | bool | Scan for deleted github forks. WARNING: This is SLOW. For a smaller repository, this process can take 20 minutes. For a larger repository, it could take hours. | False |
| modules.trufflehog.only_verified | bool | Only report credentials that have been verified | True |
| modules.trufflehog.version | str | trufflehog version | 3.90.8 |
| modules.trufflehog.version | str | trufflehog version | 3.95.5 |
| modules.urlscan.urls | bool | Emit URLs in addition to DNS_NAMEs | False |
| modules.virustotal.api_key | str | VirusTotal API Key | |
| modules.wayback.archive | bool | fetch archived versions of dead URLs from the Wayback Machine and emit HTTP_RESPONSE events (requires urls=true) | False |
Expand Down
10 changes: 5 additions & 5 deletions docs/troubleshooting.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,18 +5,18 @@
- `ERROR: No matching distribution found for bbot`
- `bash: /home/user/.local/bin/bbot: /home/user/.local/pipx/venvs/bbot/bin/python: bad interpreter`

If you get errors resembling any of the above, it's probably because your Python version is too old. To install a newer version (3.9+ is required), you will need to do something like this:
If you get errors resembling any of the above, it's probably because your Python version is too old. To install a newer version (3.10+ is required), you will need to do something like this:
```bash
# install a newer version of python
sudo apt install python3.9 python3.9-venv
sudo apt install python3.10 python3.10-venv
# install pipx
python3.9 -m pip install --user pipx
python3.10 -m pip install --user pipx
# add pipx to your path
python3.9 -m pipx ensurepath
python3.10 -m pipx ensurepath
# reboot
reboot
# install bbot
python3.9 -m pipx install bbot
python3.10 -m pipx install bbot
# run bbot
bbot --help
```
Expand Down