BBOT Recon Skill

Overview

BBOT (Bee·bot) is a multipurpose recursive internet scanner by Black Lantern Security, inspired by SpiderFoot. It automates reconnaissance for bug bounties and Attack Surface Management (ASM) with 200+ modules, NLP-powered subdomain mutations, custom YARA rules, Lightfuzz, and native output to Neo4j, SIEMs, and databases. BBOT consistently finds 20-50% more subdomains than competing tools.

When to Use

• Starting bug bounty reconnaissance on authorized targets
• Enumerating subdomains for a target domain
• Crawling/spidering web applications for endpoint discovery
• Gathering emails and OSINT data for social engineering assessments
• Mapping attack surface across cloud, code repos, and web assets
• Building target profiles for penetration testing engagements
• Running custom vulnerability scans with YARA rules
• Fuzzing web parameters with Lightfuzz
• Correlating findings in graph databases

When NOT to Use