lijiejie/BBScan ? reverse-engineered prompt

Build me a fast web vulnerability scanner in Python that can take a list of sites or hosts and check a lot of targets quickly.

I want it to scan for common issues like data leaks, directory traversal, and hidden admin pages, then also fingerprint what each site is using, like the framework, CMS, language, middleware, or other products. It should be able to read JavaScript files, pull out API endpoints, and look for exposed tokens, secrets, passwords, or keys.

Please make it run on multiple targets at once, support loading URLs from a file, and generate a clean HTML report so I can review the results easily. If it makes sense, include options to focus on only fingerprinting or only certain rules, and skip private network targets when needed.

Use current docs online if you need to.