---
id: bbot
version: "3.0.1"
license: AGPL-3.0
license_treatment: agpl
maintenance: active
---

# bbot — OSINT automation for hackers.

License: agpl · Maintenance: active · Downloads: 77.0K/mo

## What it is and what it does

BBOT is a modular security scanner designed for reconnaissance, bug bounties, and attack surface management. It combines passive API sources with active techniques like DNS brute-forcing and web crawling to discover subdomains, email addresses, web vulnerabilities, and other reconnaissance data. The tool accepts multiple target types—domains, IPs, IP ranges, URLs, emails, and more—and can run preset scanning profiles (subdomain-enum, spider, email-enum, web, kitchen-sink) or be customized with individual modules.

As a Python library or CLI tool, BBOT outputs findings to multiple formats including Neo4j, databases, messaging platforms, and standard files. It emphasizes automation and scale: recursive DNS mutations, NLP-powered subdomain generation, web screenshots, and integration with Ansible for dependency management. The active maintenance, large dependency footprint, and AGPL license reflect its role as a comprehensive framework rather than a lightweight utility.

Use it for:

- Enumerate subdomains of a target domain using passive APIs and recursive DNS brute-force with target-specific mutations.
- Crawl a website to extract emails, URLs, and other reconnaissance data while respecting session integrity.
- Scan an entire IP range or multiple targets in parallel to map an organization's attack surface.
- Integrate reconnaissance into a security workflow via Python API for synchronous or asynchronous event processing.
- Output scan results directly to Neo4j, Elasticsearch, or messaging platforms for real-time analysis and alerting.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

BBOT is a multipurpose reconnaissance and vulnerability scanner that automates subdomain enumeration, web crawling, email discovery, and security scanning across targets ranging from domains to IP ranges to URLs.

Yes, if you need comprehensive reconnaissance automation for security testing or bug bounties. BBOT is actively maintained, has low install friction, and offers a large module ecosystem. However, verify that AGPL-3.0 licensing aligns with your use case, and be aware that the 36 runtime dependencies add complexity. Not suitable for minimal, lightweight scanning—consider simpler tools if you only need basic subdomain enumeration.

## Install

pip install bbot
uv add bbot
poetry add bbot

## Installing bbot

Before you install: Low friction install via pip or pipx. Actively maintained with a recent release (24 days old) and strong community signal (10362 GitHub stars). Requires Python 3.10 or later and brings in 36 runtime dependencies including Ansible, DNS tools, and web frameworks—manageable for a comprehensive security scanner.

License in practice: Licensed under AGPL-3.0, which requires that any modifications or derivative works distributed must also be released under AGPL-3.0. Suitable for internal security work and open-source projects, but commercial use or proprietary modifications require careful licensing review.

Quickstart:

pip install bbot

from bbot.scanner import Scanner

scan = Scanner("evilcorp.com", presets=["subdomain-enum"])
for event in scan.start():
    print(event)

Requires Python 3.10 or later. DNS resolver performance depends on unfiltered resolvers in /etc/resolv.conf; adding more resolvers significantly speeds up scans.

Verify before relying:

- Whether the claimed 20-50% subdomain discovery advantage over other tools holds across different domain sizes and configurations.
- Performance characteristics and resource requirements for large-scale scans (e.g., scanning entire IP ranges or thousands of targets).
- Compatibility and stability of the 36 runtime dependencies in production environments.

## Package facts

- License: AGPL-3.0 (agpl)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 77.0K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

subdomain enumeration scanner, osint reconnaissance automation, bug bounty recon tool, attack surface mapping, web vulnerability scanner, dns brute force tool, security scanning framework, osint-framework, attack-surface-mapping, security-automation

[View on SkillFed](https://skillfed.io/packages/bbot) · [View on PyPI](https://pypi.org/project/bbot/)