Skip to content
@blacklanternsecurity

Black Lantern Security

Security Organization
README.md

Black Lantern Security

Offensive security tooling, built in the open.

BBOT

BBOT is a recursive internet scanner. Modules chain, so the output of one is the input of the next. A seed domain becomes subdomains, open ports, web technologies, findings.

Its libraries stand alone:

Project What it does
baddns Subdomain takeover and DNS misconfiguration detection
blastdns High-performance DNS resolution
blasthttp High-performance HTTP client
cloudcheck Identifies which cloud provider owns an address
radixtarget Fast IP and DNS target matching

Contributing

Everything here is AGPL-3.0.

Start with CONTRIBUTING.md and the standards our own work is held to.

External contributors sign the CLA before merge.

Talk to us

Usage questions: Discord.

Bugs and features: the issue tracker of the project they concern.

Vulnerabilities: private reporting. Never a public issue.

blacklanternsecurity.com

Popular repositories Loading

  1. bbot bbot Public

    The recursive internet scanner for hackers. 🧡

    Python 10.9k 963

  2. writehat writehat Public

    A pentest reporting tool written in Python. Free yourself from Microsoft Word.

    Python 1.5k 250

  3. MANSPIDER MANSPIDER Public

    Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

    Python 1.4k 162

  4. TREVORspray TREVORspray Public

    TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

    Python 1.4k 178

  5. badsecrets badsecrets Public

    A library for detecting known secrets across many web frameworks

    Python 835 85

  6. TREVORproxy TREVORproxy Public

    A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

    Python 538 78

Repositories

Showing 10 of 114 repositories
  • cloudcheck Public

    Check whether an IP address or hostname belongs to popular cloud providers

    blacklanternsecurity/cloudcheck's past year of commit activity
    Python 93 AGPL-3.0 9 3 0 Updated Nov 3, 2026
  • bbot-server Public

    A persistent database + CLI for your BBOT scan data 🧡

    blacklanternsecurity/bbot-server's past year of commit activity
    Python 53 AGPL-3.0 15 2 8 Updated Nov 2, 2026
  • bbot Public

    The recursive internet scanner for hackers. 🧡

    blacklanternsecurity/bbot's past year of commit activity
    Python 10,920 AGPL-3.0 963 25 13 Updated Nov 2, 2026
  • blasthttp Public

    A fast offensive-focused HTTP client written in Rust, with Python bindings

    blacklanternsecurity/blasthttp's past year of commit activity
    Rust 7 AGPL-3.0 1 5 1 Updated Nov 2, 2026
  • badsecrets Public

    A library for detecting known secrets across many web frameworks

    blacklanternsecurity/badsecrets's past year of commit activity
    Python 835 AGPL-3.0 85 2 3 Updated Nov 3, 2026
  • PoCs Public

    Proof of Concepts for Exploits and Nuclei Templates

    blacklanternsecurity/PoCs's past year of commit activity
    2 AGPL-3.0 0 0 0 Updated Nov 2, 2026
  • blastdns Public

    An ultra-fast DNS resolver written in Rust, with Python bindings

    blacklanternsecurity/blastdns's past year of commit activity
    Rust 10 AGPL-3.0 2 1 1 Updated Nov 2, 2026
  • crowsnest Public

    Security News Curator

    blacklanternsecurity/crowsnest's past year of commit activity
    HTML 4 AGPL-3.0 1 0 0 Updated Nov 2, 2026
  • baddns Public

    Check subdomains for subdomain takeovers and other DNS tomfoolery

    blacklanternsecurity/baddns's past year of commit activity
    Python 448 AGPL-3.0 45 5 1 Updated Nov 2, 2026
  • radixtarget Public

    RadixTarget is a performant radix implementation designed for quick lookups of IP addresses/networks and DNS hostnames.

    blacklanternsecurity/radixtarget's past year of commit activity
    Rust 11 AGPL-3.0 2 1 5 Updated Nov 2, 2026
View all repositories