blacklanternsecurity/bbot

Health v2 · maintenance only

Adoption not part of the score

10508 stars · 916 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

BBOT is a recursive, multipurpose internet scanner built in Python for automating OSINT reconnaissance, bug bounty hunting, and attack surface management. It enumerates subdomains and other targets via passive APIs and recursive DNS brute-forcing, with output that can feed into Neo4j for graph visualization.

Use cases

• enumerate subdomains of a target domain
• automate recon for bug bounty hunting
• map an organization's external attack surface
• gather OSINT on a target recursively
• collect threat intelligence on domains
• visualize scan results as a graph in Neo4j

When to choose

• you need recursive, automated reconnaissance across many targets
• you want a single tool combining passive API sources and active DNS brute-forcing
• you run bug bounty or ASM workflows and want scriptable CLI scanning

When to avoid

• you need a passive-only lightweight subdomain lookup without scanning
• you require a permissive license for closed-source integration (AGPL-3.0)
• you want a GUI-driven vulnerability scanner rather than a CLI tool

Facets

cli-tool · maturity active

osint web-scraping security workflow-automation cli search-engine security osint penetration-testing developer-tools python cli windows recon subdomain-enumeration attack-surface-management bug-bounty threat-intelligence recursive-scanning neo4j automation docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="blacklanternsecurity/bbot")