bbot - The recursive internet scanner for hackers. 🧡

项目说明

![bbot_banner]()

![Python ]() ![License]() ![PyPi Downloads]() ![Ruff]() ![Tests]() ![Codecov]() ![Discord]()

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon, Bug Bounties, and ASM!

_A BBOT scan in real-time - with _

Installation

_For more installation methods, including Docker, see Getting Started_

> Upgrading from 2.x? BBOT 3.0 contains breaking changes to the CLI, presets, modules, events, and Python API. See the 2.x → 3.0 Migration Guide (源码) before upgrading.

> Speed tip: BBOT's DNS resolver (blastdns) spins up multiple threads per resolver in /etc/resolv.conf. Adding more unfiltered resolvers dramatically speeds up scans. See the sample resolv.conf and Tips and Tricks for details.

Example Commands

1) Subdomain Finder

Passive API sources plus a recursive DNS brute-force with target-specific subdomain mutations.

<!-- BBOT SUBDOMAIN-ENUM PRESET EXPANDABLE -->

<details>
<summary><b><代码>subdomain-enum.yml</代码></b></summary>

</details>

<!-- END BBOT SUBDOMAIN-ENUM PRESET EXPANDABLE -->

BBOT consistently finds 20-50% more subdomains than other tools. The bigger the domain, the bigger the difference. To learn how this is possible, see How It Works.

!subdomain-stats-ebay

2) Web Spider

<!-- BBOT SPIDER PRESET EXPANDABLE -->

<details>
<summary><b><代码>spider.yml</代码></b></summary>

</details>

<!-- END BBOT SPIDER PRESET EXPANDABLE -->

3) Email Gatherer

<!-- BBOT EMAIL-ENUM PRESET EXPANDABLE -->

<details>
<summary><b><代码>email-enum.yml</代码></b></summary>

</details>

<!-- END BBOT EMAIL-ENUM PRESET EXPANDABLE -->

4) Web Scanner

<!-- BBOT WEB PRESET EXPANDABLE -->

<details>
<summary><b><代码>web.yml</代码></b></summary>

</details>

<!-- END BBOT WEB PRESET EXPANDABLE -->

<!-- BBOT WEB-HEA EXPANDABLE -->

<details>
<summary><b><代码>web-heavy.yml</代码></b></summary>

</details>

<!-- END BBOT WEB-HEA EXPANDABLE -->

5) E E All at Once

<!-- BBOT KITCHEN-SINK PRESET EXPANDABLE -->

<details>
<summary><b><代码>kitchen-sink.yml</代码></b></summary>

</details>

<!-- END BBOT KITCHEN-SINK PRESET EXPANDABLE -->

How it Works

Click the graph below to explore the inner workings of BBOT.

![image]()

Output Modules

Neo4j

Teams

Discord

Slack

Postgres

MySQL

SQLite

Splunk

Elasticsearch

CSV

JSON

HTTP

Websocket

...and more!

BBOT as a Python Library

#### Synchronous

#### Asynchronous

<details>
<summary><b>SEE: This Nefarious Discord Bot</b></summary>

A BBOT Discord Bot that responds to the /scan command. Scan the internet from the comfort of your discord 服务端!

!bbot-discord

</details>

Feature O

Support for Multiple Targets

Web Screenshots

Suite of Offensive Web Modules

NLP-powered Subdomain Mutations

Nati to Neo4j (and more)

Automatic dependency install with Ansible

Search entire attack surface with custom YARA rules

Python API + De Documentation

Targets

BBOT accepts an unlimited number of targets via -t. You can specify targets either directly on the command line or in files (or both!):

Targets can be any of the following:

DNS Name (e.com)

IP Address (1.2.3.4)

IP Range (1.2.3.0/24)

Open TCP Port (192.168.0.1:80)

URL ()

Email Address ()

Organization (ORG:e)

Username (USER:bobsmith)

Filesystem (FILESYSTEM:/tmp/asdf)

Mobile App (MOBILE_APP:)

For more information, see Targets. To learn how BBOT handles scope, see Scope.

API Keys

Similar to Amass or Subfinder, BBOT supports API keys for third-party services such as SecurityTrails, etc.

The standard way to do this is to enter your API keys in ~/.config/bbot/secrets.yml. Note that multiple API keys are allowed:

If you like, you can also specify them on the command line:

For details, see Configuration.

Complete Lists of Modules, Flags, etc.

Complete list of Modules.

Complete list of Flags.

Complete list of Presets.

- Complete list of Global Config Options.
- Complete list of Module Config Options.

Documentation

<!-- BBOT DOCS TOC -->

User Manual

- Basics
- Getting Started
- How it Works
- Comparison to Other Tools
- Scanning
- Scanning O
- Presets
- O
- List of Presets
- Events
- Output
- Tips and Tricks
- Ad Usage
- Configuration
- Scan Sanity
- Modules
- List of Modules
- Internal Modules
- Nuclei
- Wayback
- Custom YARA Rules
- Lightfuzz
- Webbrute
- Migration
- 2.x → 3.0 Breaking Changes
- Misc
- Contribution
- Release History
- Troubleshooting

De Manual

- De O
- Setting Up a De
- Core Dependencies
- BBOT Internal Architecture
- How to Write a BBOT Module
- & Inspecting Presets
- Unit Tests
- Discord Bot Example
- Code Reference
- Scanner
- Presets
- Event
- Target
- BaseModule
- BBOTCore
- Helpers
- O
- Command
- DNS
- Interactsh
- Miscellaneous
- Web
- Word Cloud
<!-- END BBOT DOCS TOC -->

Contribution

Some of the best BBOT modules were written by the community. BBOT is being constantly improved; every day it grows more powerful!

We welcome contributions. Not just 代码, but ideas too! If you have an idea for a new feature, please let us know in Discussions. If you want to get your hands dirty, see Contribution. There you can find setup instructions and a simple tutorial on how to write a BBOT module. We also ha De Documentation.

Thanks to these amazing people for contributing to BBOT! :heart:

<p align="center">
<a href="
<img src="
</a>
</p>

Special thanks to:

for creating BBOT

for his extensive work on BBOT's web hacking features, including badsecrets and baddns

Ste () for creating Spiderfoot

for his Neo4j and Ansible expertise

-sage for his family of badass 代码-looting modules

and for their ruthless testing

Aleksei Korne) for granting us ownership of the bbot Pypi repository <3

项目信息

开发语言：Python

Star 数：10658

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕The recursive internet scanner for hackers. 🧡展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。