# lijiejie/BBScan

A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers

Repository: https://github.com/lijiejie/BBScan
Canonical: https://ross.abutalabs.com/products/bbscan
Language: Python
License: Apache-2.0
License Family: permissive
Last push: 2024-12-31T09:28:31+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3946, "days_push": 610, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2371, forks 582 (observed 2026-08-28T04:06:41.825674+00:00)

## What it is
BBScan is a fast, lightweight, high-concurrency web vulnerability scanner written in Python. It helps penetration testers quickly identify potentially vulnerable targets from large numbers of web servers by detecting data leaks, directory traversal, admin backends, token/secret leaks, and web fingerprints.

## Use cases
- scan a large list of web servers for common vulnerabilities
- find exposed git and svn directories on web targets
- detect leaked tokens, secrets, passwords, and API keys in JavaScript files
- extract API endpoints from .js files of a website
- identify web frameworks, CMS, and middleware fingerprints of targets
- scan neighbor hosts in the same network subnet
- generate HTML scan reports for a batch of domains

## When to choose
- you need to quickly triage many web targets for obvious weaknesses during a pentest
- you want a lightweight Python-based scanner without heavy dependencies
- you need combined vulnerability checks and web fingerprinting in one tool

## When to avoid
- you need deep exploitation capabilities rather than detection
- you require a full-featured scanner with extensive plugin ecosystems like Burp Suite or Nuclei templates
- you need authenticated or complex multi-step application testing

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, web-scraping, cli
- domain: security, penetration-testing, web-development
- platform: python, cli, windows
- tags: vulnerability-scanner, pentesting, web-security, fingerprinting, secret-detection, directory-traversal, api-endpoint-discovery, command-line, linux, macos

## Member repositories
- lijiejie/BBScan (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:41.825674+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:35:22.623868+00:00, confidence not recorded.
  - readme: https://github.com/lijiejie/BBScan (fetched 2026-08-28T04:06:41.825674+00:00, sha 96b1c9737c00)
- Data as of 2026-08-30T08:39:29.467469+00:00.