Skip to content

baddns 2.0.0 / badsecrets 1.0.0 compatibility#2933

Merged
liquidsec merged 13 commits into
3.0from
badsecrets-baddns-major-version-compat
Mar 23, 2026
Merged

baddns 2.0.0 / badsecrets 1.0.0 compatibility#2933
liquidsec merged 13 commits into
3.0from
badsecrets-baddns-major-version-compat

Conversation

@liquidsec

Copy link
Copy Markdown
Collaborator

Summary

  • baddns: Pass severity/confidence directly from library instead of mapping (baddns 2.0.0 aligns with BBOT's levels)
  • baddns: Replace only_high_confidence boolean with min_severity/min_confidence threshold options (defaults: LOW/MODERATE)
  • baddns_direct: Inherit from baddns base module instead of duplicating setup/threshold logic
  • badsecrets: Add ASPNET_Resource to technology detection (new module in badsecrets 1.0.0)
  • Version bumps: baddns~=2.0.0, badsecrets~=1.0.0

Note: Tests will fail until baddns 2.0.0 and badsecrets 1.0.0 are published to PyPI.

@liquidsec

Copy link
Copy Markdown
Collaborator Author

do not merge until badsecrets 1.0 and baddns 2.0 are released.

@github-actions

github-actions Bot commented Feb 28, 2026

Copy link
Copy Markdown
Contributor

Performance Benchmark Report

Failed to generate detailed benchmark comparison

The benchmark comparison failed to run. This might be because:

  • Benchmark tests don't exist on the base branch yet
  • Dependencies are missing
  • Test execution failed

Please check the workflow logs for details.

Benchmark artifacts may be available for download from the workflow run.

- Add submodule auto-filter: disable submodules whose max severity/confidence
  is below configured thresholds (avoids running expensive submodules for nothing)
- Create baddns.yml base preset (CNAME, MX, TXT) and baddns-heavy.yml (all submodules)
- Rename spider-intense→spider-heavy, baddns-intense→baddns-heavy
- Fix baddns_zone default min_severity to INFORMATIONAL (NSEC/zonetransfer need it)
- Update kitchen-sink.yml, remove stale enable_references v1.x config
- Fix baddns_zone NSEC test (bad.dns→bad.com for tldextract compatibility)
- Fix baddns_direct test (updated signature matcher for baddns 2.0)
- Update all preset warning messages and docs references
…r-version-compat

# Conflicts:
#	bbot/modules/baddns_direct.py
#	bbot/modules/badsecrets.py
#	docs/modules/lightfuzz.md
#	docs/scanning/presets_list.md
Reset the global asndb_client after cleanup so subsequent
ASNDB() calls create a fresh client instead of returning a closed one.
@codecov

codecov Bot commented Mar 22, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 82.43243% with 26 lines in your changes missing coverage. Please review.
✅ Project coverage is 91%. Comparing base (eedd69b) to head (9ddf981).
⚠️ Report is 14 commits behind head on 3.0.

Files with missing lines Patch % Lines
...est/test_step_2/module_tests/test_module_baddns.py 85% 13 Missing ⚠️
bbot/modules/baddns.py 77% 11 Missing ⚠️
bbot/modules/baddns_direct.py 82% 2 Missing ⚠️
Additional details and impacted files
@@          Coverage Diff           @@
##             3.0   #2933    +/-   ##
======================================
+ Coverage     91%     91%    +1%     
======================================
  Files        436     436            
  Lines      36784   36892   +108     
======================================
+ Hits       33440   33551   +111     
+ Misses      3344    3341     -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@liquidsec liquidsec marked this pull request as ready for review March 22, 2026 05:37
@liquidsec liquidsec force-pushed the badsecrets-baddns-major-version-compat branch 2 times, most recently from 54aa7d6 to 19e5d6a Compare March 22, 2026 22:05
@liquidsec liquidsec force-pushed the badsecrets-baddns-major-version-compat branch from 19e5d6a to 44ffba1 Compare March 22, 2026 23:11
@liquidsec liquidsec merged commit 450946f into 3.0 Mar 23, 2026
16 checks passed
aconite33 pushed a commit that referenced this pull request Mar 23, 2026
…major-version-compat

baddns 2.0.0 / badsecrets 1.0.0 compatibility
@liquidsec liquidsec mentioned this pull request Jun 9, 2026
@ausmaster ausmaster deleted the badsecrets-baddns-major-version-compat branch June 11, 2026 01:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants