Skip to content
@blacklanternsecurity

Black Lantern Security

Security Organization
README.md

Black Lantern Security

Offensive security tooling, built in the open.

BBOT

BBOT is a recursive internet scanner. Modules chain, so the output of one is the input of the next. A seed domain becomes subdomains, open ports, web technologies, findings.

Its libraries stand alone:

Project What it does
baddns Subdomain takeover and DNS misconfiguration detection
blastdns High-performance DNS resolution
blasthttp High-performance HTTP client
cloudcheck Identifies which cloud provider owns an address
radixtarget Fast IP and DNS target matching

Contributing

Everything here is AGPL-3.0.

Start with CONTRIBUTING.md and the standards our own work is held to.

External contributors sign the CLA before merge.

Talk to us

Usage questions: Discord.

Bugs and features: the issue tracker of the project they concern.

Vulnerabilities: private reporting. Never a public issue.

blacklanternsecurity.com

Popular repositories Loading

  1. bbot bbot Public

    The recursive internet scanner for hackers. 🧡

    Python 10.9k 961

  2. writehat writehat Public

    A pentest reporting tool written in Python. Free yourself from Microsoft Word.

    Python 1.5k 249

  3. MANSPIDER MANSPIDER Public

    Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

    Python 1.4k 162

  4. TREVORspray TREVORspray Public

    TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

    Python 1.4k 178

  5. badsecrets badsecrets Public

    A library for detecting known secrets across many web frameworks

    Python 834 85

  6. TREVORproxy TREVORproxy Public

    A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

    Python 538 78

Repositories

Showing 10 of 114 repositories
  • bbot Public

    The recursive internet scanner for hackers. 🧡

    blacklanternsecurity/bbot's past year of commit activity
    Python 10,907 AGPL-3.0 961 26 22 Updated Nov 1, 2026
  • impacket Public Forked from fortra/impacket

    Impacket is a collection of Python classes for working with network protocols.

    blacklanternsecurity/impacket's past year of commit activity
    Python 3 4,091 0 0 Updated Nov 1, 2026
  • cloudcheck Public

    Check whether an IP address or hostname belongs to popular cloud providers

    blacklanternsecurity/cloudcheck's past year of commit activity
    Python 93 AGPL-3.0 9 3 2 Updated Nov 1, 2026
  • blasthttp Public

    A fast offensive-focused HTTP client written in Rust, with Python bindings

    blacklanternsecurity/blasthttp's past year of commit activity
    Rust 7 AGPL-3.0 1 5 7 Updated Oct 31, 2026
  • public-dns-servers Public

    A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!

    blacklanternsecurity/public-dns-servers's past year of commit activity
    Python 39 AGPL-3.0 7 1 0 Updated Oct 31, 2026
  • MANSPIDER Public

    Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

    blacklanternsecurity/MANSPIDER's past year of commit activity
    Python 1,437 AGPL-3.0 162 16 3 Updated Oct 30, 2026
  • release-workflows Public

    Reusable CI, test and release workflows for Black Lantern Security projects. Write access controls every caller's release pipeline.

    blacklanternsecurity/release-workflows's past year of commit activity
    Python 0 AGPL-3.0 0 0 0 Updated Oct 30, 2026
  • blastdns Public

    An ultra-fast DNS resolver written in Rust, with Python bindings

    blacklanternsecurity/blastdns's past year of commit activity
    Rust 10 AGPL-3.0 2 1 2 Updated Oct 30, 2026
  • badsecrets Public

    A library for detecting known secrets across many web frameworks

    blacklanternsecurity/badsecrets's past year of commit activity
    Python 834 AGPL-3.0 85 2 1 Updated Oct 30, 2026
  • baddns Public

    Check subdomains for subdomain takeovers and other DNS tomfoolery

    blacklanternsecurity/baddns's past year of commit activity
    Python 448 AGPL-3.0 45 5 1 Updated Oct 30, 2026
View all repositories