lijiejie/BBScan

Health v2 · maintenance only

Adoption not part of the score

2371 stars · 582 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

BBScan is a fast, lightweight, high-concurrency web vulnerability scanner written in Python. It helps penetration testers quickly identify potentially vulnerable targets from large numbers of web servers by detecting data leaks, directory traversal, admin backends, token/secret leaks, and web fingerprints.

Use cases

• scan a large list of web servers for common vulnerabilities
• find exposed git and svn directories on web targets
• detect leaked tokens, secrets, passwords, and API keys in JavaScript files
• extract API endpoints from .js files of a website
• identify web frameworks, CMS, and middleware fingerprints of targets
• scan neighbor hosts in the same network subnet
• generate HTML scan reports for a batch of domains

When to choose

• you need to quickly triage many web targets for obvious weaknesses during a pentest
• you want a lightweight Python-based scanner without heavy dependencies
• you need combined vulnerability checks and web fingerprinting in one tool

When to avoid

• you need deep exploitation capabilities rather than detection
• you require a full-featured scanner with extensive plugin ecosystems like Burp Suite or Nuclei templates
• you need authenticated or complex multi-step application testing

Facets

cli-tool · maturity active

security vulnerability-scanning web-scraping cli security penetration-testing web-development python cli windows vulnerability-scanner pentesting web-security fingerprinting secret-detection directory-traversal api-endpoint-discovery command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lijiejie/BBScan")