3.0.1 Release

[liquidsec]

3.0.1 Release Notes

Fixes

• Restore cloudcheck tag propagation to URL / OPEN_TCP_PORT children (restore cloudcheck tag propagation to URL/OPEN_TCP_PORT children #3309). _minimize() was wiping _resolved_hosts on parent events, starving dnsresolve when child events reached it. Cloud tags never made it past the DNS_NAME.
• Fix virtualhost.finish() crash when the baseline request returned None (fix virtualhost.finish() crash on None baseline_response #3273).
• Escape control characters in console output so raw bytes in scan data can't garble the terminal (Escape control characters in console output #3274, closes Console corrupts (switches to line-drawing charset) when scan data contains control bytes #3258).
• Fix stale baddns config key in the kitchen-sink preset; adds a test that validates every bundled preset (Fix stale baddns config key in kitchen-sink preset #3280, closes Fix stale baddns config key in kitchen-sink preset #3279).
• Fix openssl_dev_headers dep check to actually require the header, so minimal images (e.g. python:3.11-slim) no longer skip installing libssl-dev (Fix openssl_dev_headers dep check to require the header #3282, closes medusa not compiling on docker container #3272).
• Point API-key docs to secrets.yml in the sections that still mentioned bbot.yml (Point API-key docs to secrets.yml #3283, closes Update readme to point api keys to secrets.yml #3270).

waf_bypass improvements

• Lower neighbor_cidr default from /24 to /28 (module + waf-bypass preset).
• Parallelize bypass checks in finish() up to 100 by default.
• Distinguish direct vs neighbor bypass candidates in log output.
• Demote non-IP DNS result log from warning to verbose.

Tooling updates

• Update nuclei to 3.11.0 (Update nuclei to 3.11.0 #3275).
• Update trufflehog to 3.95.9 (Update trufflehog to 3.95.8 #3276, Update trufflehog to 3.95.9 #3295).

Chores

• Attribute automated docs update PRs to blsaccess (Attribute automated docs update PRs to blsaccess #3281).

Dependency bumps

beautifulsoup4 4.14.3→4.15.0, cachetools 6.2.6→7.1.4, cryptography 46.0.5→48.0.1, deepdiff 8.6.1→9.1.0, dnspython 2.7.0→2.8.0, griffe 1.15.0→2.1.0, idna 3.11→3.18, lxml 6.0.2→6.1.0, maturin 1.13.3→1.14.1, mike 2.1.3→2.2.0, mkdocs-material 9.7.1→9.7.7, mkdocstrings 0.30.1→1.0.6, mkdocstrings-python 2.0.2→2.0.5, pip 26.0.1→26.1.2, pre-commit 4.5.1→4.6.0, pydantic 2.12.5→2.13.4, pymdown-extensions 10.20.1→11.0.1, pytest 8.4.2→9.1.1, pytest-cov 7.0.0→7.1.0, pytest-env 1.1.5→1.6.0, pytest-rerunfailures 16.1→16.4, regex 2026.1.15→2026.7.10, requests 2.32.5→2.33.0, ruff 0.15.18→0.15.22, soupsieve 2.8.3→2.8.4, starlette 0.52.1→1.3.1, tornado 6.5.4→6.5.7, urllib3 2.6.3→2.7.0, websockets 15.0.1→16.0, werkzeug 3.1.5→3.1.8, xxhash 3.6.0→3.8.1, ansible-runner 2.4.2→2.4.3, plus actions/cache v5→v6.

Full changelog: v3.0.0...v3.0.1

[github-actions]

📊 Performance Benchmark Report

Comparing stable (baseline) vs dev (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name	📏 Base	📏 Current	📈 Change	🎯 Status
Bloom Filter Dns Mutation Tracking Performance	4.41ms	4.31ms	-2.4% ⚪	✅
Bloom Filter Large Scale Dns Brute Force	18.03ms	18.27ms	+1.3% ⚪	✅
Large Closest Match Lookup	367.37ms	367.37ms	-0.0% ⚪	✅
Realistic Closest Match Workload	192.94ms	193.32ms	+0.2% ⚪	✅
Event Memory Medium Scan	1402 B/event	1402 B/event	+0.0% ⚪	✅
Event Memory Large Scan	1527 B/event	1527 B/event	+0.0% ⚪	✅
Event Validation Full Scan Startup Small Batch	408.59ms	407.53ms	-0.3% ⚪	✅
Event Validation Full Scan Startup Large Batch	544.20ms	547.85ms	+0.7% ⚪	✅
Make Event Autodetection Small	26.03ms	26.35ms	+1.2% ⚪	✅
Make Event Autodetection Large	265.69ms	270.62ms	+1.9% ⚪	✅
Make Event Explicit Types	11.56ms	11.85ms	+2.5% ⚪	✅
Excavate Single Thread Small	4.488s	4.266s	-4.9% ⚪	✅
Excavate Single Thread Large	10.220s	10.098s	-1.2% ⚪	✅
Excavate Parallel Tasks Small	4.590s	4.462s	-2.8% ⚪	✅
Excavate Parallel Tasks Large	6.724s	6.579s	-2.2% ⚪	✅
Intercept Throughput Small	880.68ms	942.24ms	+7.0% ⚪	✅
Intercept Throughput Medium	872.05ms	891.24ms	+2.2% ⚪	✅
Dns Throughput Quiet	2.752s	2.906s	+5.6% ⚪	✅
Dns Throughput Loaded	1.978s	1.829s	-7.6% ⚪	✅
Dns Throughput Inherited	2.389s	2.509s	+5.0% ⚪	✅
Is Ip Performance	2.32ms	2.32ms	-0.0% ⚪	✅
Make Ip Type Performance	238.09µs	273.26µs	+14.8% 🟡🟡	⚠️
Mixed Ip Operations	2.43ms	2.53ms	+4.2% ⚪	✅
Memory Use Web Crawl	1.0 MB	1.0 MB	+0.0% ⚪	✅
Memory Use Subdomain Enum	28.3 MB	28.3 MB	+0.0% ⚪	✅
Memory Use Deep Chain	5.0 MB	5.0 MB	+0.0% ⚪	✅
Memory Use Parallel Chains	11.6 MB	11.5 MB	-1.0% ⚪	✅
Scan Throughput 100	2.951s	3.036s	+2.9% ⚪	✅
Scan Throughput 1000	20.558s	21.838s	+6.2% ⚪	✅
Typical Queue Shuffle	5.36µs	5.68µs	+6.0% ⚪	✅
Priority Queue Shuffle	26.01µs	27.15µs	+4.4% ⚪	✅

🎯 Performance Summary

! 1 regression ⚠️
  30 unchanged ✅

🔍 Significant Changes (>10%)

• Make Ip Type Performance: 14.8% 🐌 slower

---

🐍 Python Version 3.11.15

[codecov]

Codecov Report

❌ Patch coverage is 97.44898% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 90%. Comparing base (5355bd1) to head (3cf28a4).
⚠️ Report is 122 commits behind head on stable.

Files with missing lines	Patch %	Lines
...est_step_2/module_tests/test_module_virtualhost.py	96%	3 Missing ⚠️
bbot/modules/waf_bypass.py	89%	1 Missing ⚠️
bbot/test/test_step_1/test_validate_preset.py	91%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##           stable   #3271    +/-   ##
=======================================
+ Coverage      90%     90%    +1%     
=======================================
  Files         450     450            
  Lines       46100   46285   +185     
=======================================
+ Hits        41347   41547   +200     
+ Misses       4753    4738    -15     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.