How f1r10-cmd/xezer works
QBH is an authorized-scope bug-bounty reconnaissance and vulnerability-hunting platform. Its principal workflow loads configuration, enforces scope and rules, runs recon and vulnerability stages (optionally chaining findings or performing a deeper hunt), stores results, and produces reports. The graph preserves major documented engine capabilities while grouping related stages. Evidence for several modules comes from the SOURCE INDEX or README rather than inspected implementation; those links are limited to documented or indexed relationships.
Main entry points: conductor.py Scan conductor · main.py CLI entry · db.py SQLite scan store · hunter.py Deep hunt
Components 23
Scan control
- CLI entry
main.py - Configuration
qbh/config.py - Scan conductor
qbh/conductor.py - Deep hunt
qbh/hunter.py - Finding chains
qbh/chain.py
Authorization and traffic
- Scope enforcement
qbh/scope.py - Authorization and RoE
qbh/authorization.py - HTTP request policy
qbh/http_policy.py - Process egress guard
qbh/egress.py
Discovery and testing
- Recon
qbh/engines/recon.py - API enumeration and fuzz
qbh/engines/api_enum.py - Content discovery
qbh/engines/content.py - Technology fingerprinting
qbh/engines/fingerprint.py - Vulnerability scanning
qbh/engines/vuln.py - Specialized tests
qbh/engines - Out-of-band checks
qbh/oob.py
Results and reporting
- SQLite scan store
qbh/db.py - Stage results
qbh/results.py - Report generation and export
qbh/report/generator.py
Adaptive behavior
- Request guardian
qbh/antiblock/guardian.py - Identity and proxy rotation
qbh/antiblock/identity.py - WAF detection policy
qbh/stealth/waf.py
Other components
- Operator
Connections 28
- Operator → CLI entry: invokes
- CLI entry → Configuration: loads
main.py - CLI entry → Scan conductor: starts scan
main.py - CLI entry → Deep hunt: starts hunt
main.py - Scan conductor → Authorization and RoE: checks permission
qbh/conductor.py - Authorization and RoE → Scope enforcement: validates hosts
qbh/authorization.py - Scan conductor → Recon: runs stage
qbh/conductor.py - Scan conductor → API enumeration and fuzz: runs stage
qbh/conductor.py - Scan conductor → Content discovery: runs stage
qbh/conductor.py - Scan conductor → Technology fingerprinting: runs stage
qbh/conductor.py - Scan conductor → Vulnerability scanning: runs stage
qbh/conductor.py - Scan conductor → Specialized tests: runs engines
qbh/conductor.py - Scan conductor → Finding chains: chains findings
qbh/conductor.py - Deep hunt → Scan conductor: runs full chain
- Deep hunt → Specialized tests: deepens testing
- Recon → SQLite scan store: stores hosts
qbh/engines/recon.py - Vulnerability scanning → SQLite scan store: reads hosts
qbh/engines/vuln.py - Scan conductor → Stage results: wraps stages
qbh/results.py - Scan conductor → SQLite scan store: records scan
qbh/conductor.py - Scan conductor → Report generation and export: generates report
qbh/conductor.py - Report generation and export → SQLite scan store: reads findings
qbh/report/generator.py - Report generation and export → Stage results: exports formats
- Scan conductor → Request guardian: configures defenses
qbh/conductor.py - Request guardian → HTTP request policy: uses request policy
qbh/antiblock/guardian.py - Request guardian → Identity and proxy rotation: rotates identity
qbh/antiblock/guardian.py - Recon → Process egress guard: runs guarded tools
- Technology fingerprinting → WAF detection policy: uses WAF policy
- Vulnerability scanning → Out-of-band checks: uses OOB checks