serain/bbrecon

Python library and CLI for the Bug Bounty Recon API

bbrecon's Issues

API to get program(s) for domain

Hey,

Awesome API! I was wondering if it would be possible to create an API, where I could provide a hostname as a parameter, and get one or more bug bounty programs associated with that hostname? It is a reverse search to what getDomains endpoint offers. I would like to check if a specific domain belongs to a bug bounty program.

Thanks in advance for your help!

Mobile Client for bbrecon rest api

Hello @serain

I developed some parts of reset api in to a mobile app

I am thinking of open sourcing it so i want to contact you regarding it

Demo of the app:

https://drive.google.com/file/d/12Cm8XV1FaUV2EVCOG_LWqfvdd1rDtNjt/view?usp=sharing

Specific dates in the since argument are ignored

The code to parse %Y-%m-%d is missing

Values under wrong slugs

Awesome tool!
I'll be trying to incorporate it in my own tool Sitedorks :)

When I do a "bbrecon get scopes", I get:

brusselsairlinesbookings                          intigriti    web       tdp.brusselsairlines.com

*Snip*

website                                           intigriti    web       press.brusselsairlines.com
website                                           intigriti    web       loop.brusselsairlines.com
website                                           intigriti    android   com.brusselsairlines.bmobile
website                                           intigriti    ios       1016513055
website                                           intigriti    web       www.brusselsairlines.com
website                                           intigriti    web       bprofile.brusselsairlines.com

It looks like something is off.

Feature request: option to show out-of-scope domains

Hi Serain,

I would like to see an option to get out-of-scope domains.
That could come in handy when checking what is allowed and what is not, for example with:
subfinder -d example.com|grep -xvf exclusions.txt
Also, for my Google dork script Sitedorks out-of-scope domains could come in handy when looking for information about a certain company.
Is it an option for you to add this option?

Grtz,
Zarcolio

Can't get API key

I get this error while trying to load https://console.bugbountyrecon.com/

New

Error retrieving programs scope

Hi,

Thanks for the service you are building! I am running into an issue every single time I run call this call:

for program in programs:
    domains = list(bb.domains(programs=[program.slug]))
    for domain in domains[:3]:
        print(domain.name)

The JSON output from the source is probably not properly formatted. See:

[...]
 kraken.realself.com
charon.realself.com
Traceback (most recent call last):
  File "bb.py", line 10, in <module>
    domains = list(bb.domains(programs=[program.slug]))
  File "/usr/local/lib/python3.8/dist-packages/bbrecon/manager.py", line 55, in domains
    for domain in paginate(
  File "/usr/local/lib/python3.8/dist-packages/bbrecon/utils.py", line 4, in paginate
    response = api_function(client=client, page=page, **kwargs)
  File "/usr/local/lib/python3.8/dist-packages/bbrecon/api/domains.py", line 32, in get_domains
    raise ApiResponseError(code=response.status_code, detail=response.json())
  File "/usr/local/lib/python3.8/dist-packages/httpx/_models.py", line 854, in json
    return jsonlib.loads(self.text, **kwargs)
  File "/usr/lib/python3.8/json/__init__.py", line 357, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python3.8/json/decoder.py", line 337, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python3.8/json/decoder.py", line 355, in raw_decode
    raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)

Unable to obtain an api key.

Hey there,
I signed up for you service using the google sso and reached the page which allows you to copy the api_key, But for some weird reason, the api key field is blank. Clicking on the copy button doesn't work either.

Is there some issue going on with the site right now?

Unable to get API key

I would like to say this is a really awesome project. But for a couple of days, I am trying to fetch the API key but I am unable to get the API key. Please look into this.

Thanks

console.bugbountyrecon.com not working with firefox

Can login but get no token, the console shows this error
TypeError: this.user.wc is undefined