Open Source Intelligence (OSINT)¶

Tools¶

bbot¶

https://github.com/blacklanternsecurity/bbot

Docker Usage¶

docker run --rm -it -v "$HOME/.bbot/scans:/root/.bbot/scans" -v "$HOME/bbot.yml:/root/.config/bbot/bbot.yml" -v "./bbot_scope.txt:/scope.txt" blacklanternsecurity/bbot:stable -t /scope.txt -f subdomain-enum -n '<scan_name>'

Load API Key Configuration -v "$HOME/bbot.yml:/root/.config/bbot/bbot.yml"

Save scan data to local machine -v "$HOME/.bbot/scans:/root/.bbot/scans"

Allow bbot to access scope file -v "./bbot_scope.txt:/scope.txt"

Load all subdomain discovery related module -f subdomain-enum

Additional flag info: https://www.blacklanternsecurity.com/bbot/Stable/scanning/

Configure API Keys¶

Free API Keys

ProjectDiscovery Chaos - https://chaos.projectdiscovery.io/
LeakIX - https://leakix.net
FullHunt - https://fullhunt.io

Example bbot.yml:

modules:
  chaos:
    api_key: "<chaos_api_key>"
  fullhunt:
    api_key: "<fullhunt_api_key>"
  leakix:
    api_key: "<leakix_api_key>"
  json:
    siem_friendly: true