Offensive security tooling, built in the open.
BBOT is a recursive internet scanner. Modules chain, so the output of one is the input of the next. A seed domain becomes subdomains, open ports, web technologies, findings.
Its libraries stand alone:
| Project | What it does |
|---|---|
| baddns | Subdomain takeover and DNS misconfiguration detection |
| blastdns | High-performance DNS resolution |
| blasthttp | High-performance HTTP client |
| cloudcheck | Identifies which cloud provider owns an address |
| radixtarget | Fast IP and DNS target matching |
Everything here is AGPL-3.0.
Start with CONTRIBUTING.md and the standards our own work is held to.
External contributors sign the CLA before merge.
Usage questions: Discord.
Bugs and features: the issue tracker of the project they concern.
Vulnerabilities: private reporting. Never a public issue.