Skip to content
@blacklanternsecurity

Black Lantern Security

Security Organization
README.md

Black Lantern Security

Offensive security tooling, built in the open.

BBOT

BBOT is a recursive internet scanner. Modules chain, so the output of one is the input of the next. A seed domain becomes subdomains, open ports, web technologies, findings.

Its libraries stand alone:

Project What it does
baddns Subdomain takeover and DNS misconfiguration detection
blastdns High-performance DNS resolution
blasthttp High-performance HTTP client
cloudcheck Identifies which cloud provider owns an address
radixtarget Fast IP and DNS target matching

Contributing

Everything here is AGPL-3.0.

Start with CONTRIBUTING.md and the standards our own work is held to.

External contributors sign the CLA before merge.

Talk to us

Usage questions: Discord.

Bugs and features: the issue tracker of the project they concern.

Vulnerabilities: private reporting. Never a public issue.

blacklanternsecurity.com

Popular repositories Loading

  1. bbot bbot Public

    The recursive internet scanner for hackers. 🧡

    Python 11.1k 993

  2. writehat writehat Public

    A pentest reporting tool written in Python. Free yourself from Microsoft Word.

    Python 1.5k 251

  3. MANSPIDER MANSPIDER Public

    Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

    Python 1.4k 164

  4. TREVORspray TREVORspray Public

    TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

    Python 1.4k 178

  5. badsecrets badsecrets Public

    A library for detecting known secrets across many web frameworks

    Python 840 86

  6. TREVORproxy TREVORproxy Public

    A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

    Python 540 78

Repositories

Showing 10 of 115 repositories
  • bbot Public

    The recursive internet scanner for hackers. 🧡

    blacklanternsecurity/bbot's past year of commit activity
    Python 11,125 AGPL-3.0 993 23 21 Updated Nov 15, 2026
  • cloudcheck Public

    Check whether an IP address or hostname belongs to popular cloud providers

    blacklanternsecurity/cloudcheck's past year of commit activity
    Python 93 AGPL-3.0 9 3 2 Updated Nov 15, 2026
  • blasthttp Public

    A fast offensive-focused HTTP client written in Rust, with Python bindings

    blacklanternsecurity/blasthttp's past year of commit activity
    Rust 7 AGPL-3.0 1 5 5 Updated Nov 14, 2026
  • public-dns-servers Public

    A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!

    blacklanternsecurity/public-dns-servers's past year of commit activity
    Python 40 AGPL-3.0 7 1 0 Updated Nov 14, 2026
  • NetExec Public Forked from Pennyw0rth/NetExec

    The Network Execution Tool

    blacklanternsecurity/NetExec's past year of commit activity
    Python 1 BSD-2-Clause 825 0 1 Updated Nov 13, 2026
  • nmappalyzer Public

    A lightweight Python 3 Nmap wrapper that doesn't try too hard. Gracefully handles any Nmap command, providing access to all output types (normal, greppable, xml), plus JSON!

    blacklanternsecurity/nmappalyzer's past year of commit activity
    Python 18 AGPL-3.0 1 0 0 Updated Nov 13, 2026
  • dp_cryptomg Public

    Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

    blacklanternsecurity/dp_cryptomg's past year of commit activity
    Python 61 AGPL-3.0 11 6 0 Updated Nov 13, 2026
  • bbot-module-playground Public

    A proving grounds for young and aspiring BBOT modules

    blacklanternsecurity/bbot-module-playground's past year of commit activity
    Python 15 AGPL-3.0 2 0 0 Updated Nov 13, 2026
  • zmap-asset-inventory Public

    Python script which takes internal asset inventory at scale using zmap. Outputs to CSV.

    blacklanternsecurity/zmap-asset-inventory's past year of commit activity
    Python 24 AGPL-3.0 10 0 0 Updated Nov 13, 2026
  • writehat Public

    A pentest reporting tool written in Python. Free yourself from Microsoft Word.

    blacklanternsecurity/writehat's past year of commit activity
    Python 1,544 AGPL-3.0 251 36 4 Updated Nov 13, 2026
View all repositories