macOS
Homebrewverified · 100%
brew install bbotlocal Homebrew formula metadata
brew / rank 3137
Install bbot with Homebrew, Nix
OSINT automation tool. Version 3.0.1 via Homebrew; verified 2026-08-02. Also installable with nix: nix profile install nixpkgs#bbot.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#bbotnixpkgs package indexes · pkgs/by-name/bb/bbot/package.nix · source: api.github.com
overview
Package summary
OSINT automation tool
Project links
Commands and aliases
- bbot
history
Project history and usage
BBOT is Black Lantern Security's OSINT, reconnaissance, bug-bounty, and attack-surface-management automation tool. It packages many passive and active discovery modules behind a single `bbot` scanner and preset system.
Project history
The upstream README describes BBOT as inspired by SpiderFoot and built to automate recon, bug bounties, and ASM. Its examples emphasize repeatable presets for subdomain enumeration, web crawling, email gathering, and web scanning.
The PyPI release metadata shows a 1.0.0 package upload on 2022-08-18. By the current upstream README, the project has stable and development installation tracks, Docker distribution, a public documentation site, and a community Discord.
Adoption history
BBOT's adoption follows the modern Python security-tool path: PyPI and pipx for primary installation, Docker for isolated runs, GitHub for development, and Homebrew/Nix formulas for users who expect security tooling in system package managers.
How it is used
Operators use BBOT by giving it targets and presets such as `subdomain-enum`, `spider`, `email-enum`, `web-basic`, or `web-thorough`. Configuration stores module options and API keys, so the same scan recipes can be repeated across assessments.
Why package nerds care
BBOT is interesting in package history because it is a high-churn security automation tool that still reaches general package managers. It shows how OSINT tooling has moved from one-off scripts toward modular scanners with presets, docs, containers, PyPI packages, and native package-manager entries.
Timeline
- 2022-08-18: PyPI metadata records BBOT 1.0.0 uploads.
- 2023: Upstream README advertises a DEF CON Recon Village/Demo Labs appearance.
- Current: README documents stable installation with `pipx install bbot`, Docker, and the official documentation site.
- 2026-06-09: PyPI metadata records 3.0.0.986rc0 release-candidate uploads.
Related projects
- Related projects include SpiderFoot, Amass, Subfinder, httpx, Nuclei, and other reconnaissance and attack-surface-management tools.
Sources
- https://github.com/blacklanternsecurity/bbot#readme
- https://pypi.org/pypi/bbot/json
- https://www.blacklanternsecurity.com/bbot/Stable/
- input:source_facts.package-manager
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for bbot. Nucleus package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.config/bbot/bbot.yml
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.config/bbot/bbot.yml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
bbot | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version3.0.1
manager updated2026-08-02
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:bbot |
|---|---|
| Version | 3.0.1 |
| Package manager | Homebrew |
| Homepage | https://www.blacklanternsecurity.com/bbot/ |
| Repository | https://github.com/blacklanternsecurity/bbot |
| Last updated | 2026-08-02T01:26:51+09:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
bbot
nix profile install nixpkgs#bbot- normalized package name match
- Matched by: Bbot
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation