bbot: A multipurpose scanner for automating Recon, Bug Bounties, and ASM.
What problem it solves
Security reconnaissance often requires combining multiple discovery techniques across domains, web services, email addresses, code, and other assets. BBOT provides a recursive scanning framework that can automate these tasks through presets, modules, and multiple output formats.
Key features
Recursive reconnaissance — BBOT recursively scans targets and can combine DNS brute-force, passive APIs, web crawling, and other modules to expand the discovered attack surface.
Source: README
Task-specific presets — Presets provide focused scans for tasks such as subdomain enumeration, email gathering, web crawling, and lightweight or aggressive web scanning.
Source: README
Broad target support — Scans can accept multiple targets on the command line or in files, including DNS names, IP addresses and ranges, URLs, email addresses, organizations, usernames, filesystems, and mobile apps.
Source: README
Multiple output formats — Scan events can be sent to databases, messaging platforms, search systems, and file formats including CSV, JSON, HTTP, and Websocket.
Source: README
Python API — BBOT can be embedded in Python applications through synchronous and asynchronous Scanner interfaces.
Source: README
Quick start
Copied verbatim from the project's README.
# stable version
pipx install bbot
# bleeding edge (dev branch)
pipx install --pip-args '\--pre' bbotWho it may suit
This may suit security researchers, bug bounty hunters, and attack-surface teams who need a modular reconnaissance workflow. It may also suit Python developers who want to incorporate scanning into custom applications.
Topics to discuss
Which preset or module combinations are most effective for your reconnaissance workflows?
Which output integrations would most improve collaboration and analysis?
What new module, target type, or automation capability should the community prioritize next?
Written by ReadmeX AI from the project's README, source and public GitHub data; it may contain mistakes.
Read the original README https://github.com/blacklanternsecurity/bbot#readme
ReadmeX opened this community for a trending project; it is not run by the project. Maintainers can claim it from the community page.
Comments
…