Dev --> Stable (2.1.0)

[TheTechromancer]

BREAKING CHANGES

Events now have several new attributes:

• .uuid and .parent_uuid
  • Unlike id, which is a hash of the event type + its data, uuid is a universally unique value which is different for every event.
  • This is useful for situations like ASM where there are lots of identical events, and we need to track parents precisely.
  • event.parent_chain is now made up of these UUIDs.
• .netloc
• .port

Documentation for event attributes is here.

TODO:

• Document event fields

New Modules

• Address #1622, add securitytxt module #1628 by @colin-stubbs
• New Module: Download Postman Workspaces #1782 by @domwhewell-sage
• New module: Enumerate targets android apps #1831 by @domwhewell-sage
• New Module: APK pure #1851 by @domwhewell-sage

Improvements

• DNS Optimizations #1723
• Elastic-friendly Event JSON #1670
• Encrypt cached sudo password #1740
• Changed teams output module to POST an adaptive card to the power automate webhook #1739 by @domwhewell-sage
• Update nuclei to 3.3.1 #1746
• Update trufflehog to 3.81.10 #1744
• Bump nuclei version #1749
• Add to social and code_repository modules to detect postman profiles and workspace links in pages #1753 by @domwhewell-sage
• Rework postman module to raise code repository events #1754 by @domwhewell-sage
• Event UUIDs #1752
• Change the wpscan defaults #1750 by @domwhewell-sage
• Emit SCAN event on finish #1761
• Fix Neo4j deprecation warning #1765
• Bugfix: docker_pull #1788 by @domwhewell-sage
• Enhancement: Postman improve scope validation #1787 by @domwhewell-sage
• YARA Helper to extract target hostnames from string #1798
• Hostname extraction - only extract whitelisted hosts #1809
• Enhancement: Trufflehog accept postman workspaces #1811 by @domwhewell-sage
• Move folder crawling to speculate #1836 by @domwhewell-sage
• Misc improvements #1840 thanks to @Sh4d0wHunt3rX
• Convert is_login_page() to excavate rule #1844
• Better handling of custom secrets files in badsecrets #1864 by @liquidsec
• Handle bad chars in YARA matched data #1868 by @liquidsec
• Break out docs updater into separate workflow #1871

Bugfixes

• Fix bug in download() helper #1728
• Fix version updater #1743
• Fix Teams output module #1760 by @domwhewell-sage
• Fix yara rule hostname generation bug #1768 by @liquidsec
• fix docs autopublish #1808
• IIS Shortnames: fixing bug with confirmation detection #1814 by @liquidsec
• Vhost repeat bug #1813 by @liquidsec
• URL sanitization error fix #1709 by @liquidsec
• Fix pypi autopublish #1816
• Fix duplicate uuid for scan events #1819
• Fix parent_url() to remove querystring #1820 by @liquidsec
• Fix trufflehog macos url #1825 thanks to @Giardi77
• Fix: Trufflehog Accepting already parsed files #1834 by @domwhewell-sage
• Misc Bugfixes #1857
• DNN installwizard detector bugfix #1863 by @liquidsec
• Fixing Bugs with Generic SSRF Payload #1870 by @liquidsec
• Fix bug with module exclusions #1872

[codecov]

Codecov Report

Attention: Patch coverage is 90.94590% with 246 lines in your changes missing coverage. Please review.

Project coverage is 93%. Comparing base (6a55178) to head (7716db3).
Report is 419 commits behind head on stable.

Files with missing lines	Patch %	Lines
bbot/core/helpers/depsinstaller/sudo_askpass.py	0%	29 Missing ⚠️
bbot/modules/subdomainradar.py	77%	27 Missing ⚠️
bbot/modules/postman_download.py	88%	21 Missing ⚠️
bbot/core/helpers/depsinstaller/installer.py	55%	19 Missing ⚠️
bbot/core/engine.py	89%	16 Missing ⚠️
bbot/modules/google_playstore.py	79%	13 Missing ⚠️
bbot/modules/postman.py	61%	13 Missing ⚠️
bbot/modules/output/teams.py	80%	12 Missing ⚠️
bbot/modules/baddns_direct.py	83%	10 Missing ⚠️
bbot/modules/base.py	91%	9 Missing ⚠️
... and 23 more

Additional details and impacted files

@@           Coverage Diff            @@
##           stable   #1724     +/-   ##
========================================
+ Coverage      93%     93%     +1%     
========================================
  Files         341     354     +13     
  Lines       26056   27456   +1400     
========================================
+ Hits        24007   25314   +1307     
- Misses       2049    2142     +93     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[colin-stubbs]

Awesome, great to see!