-
Notifications
You must be signed in to change notification settings - Fork 567
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'dev' of https://github.com/blacklanternsecurity/bbot in…
…to generic-ssrf-parameter-refactor
- Loading branch information
Showing
268 changed files
with
6,307 additions
and
4,366 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -5,4 +5,4 @@ | |
| *.txt text eol=lf | ||
| *.json text eol=lf | ||
| *.md text eol=lf | ||
| *.sh text eol=lf | ||
| *.sh text eol=lf | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -9,13 +9,13 @@ jobs: | |
| update-nuclei-version: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| ref: dev | ||
| fetch-depth: 0 | ||
| token: ${{ secrets.BBOT_DOCS_UPDATER_PAT }} | ||
| - name: Set up Python | ||
| uses: actions/setup-python@v4 | ||
| uses: actions/setup-python@v5 | ||
| with: | ||
| python-version: '3.x' | ||
| - name: Install dependencies | ||
|
|
@@ -44,7 +44,7 @@ jobs: | |
| run: "sed -i '0,/\"version\": \".*\",/ s/\"version\": \".*\",/\"version\": \"${{ env.latest_version }}\",/g' bbot/modules/deadly/nuclei.py" | ||
| - name: Create pull request to update the version | ||
| if: steps.update-version.outcome == 'success' | ||
| uses: peter-evans/create-pull-request@v5 | ||
| uses: peter-evans/create-pull-request@v7 | ||
| with: | ||
| token: ${{ secrets.BBOT_DOCS_UPDATER_PAT }} | ||
| commit-message: "Update nuclei" | ||
|
|
@@ -61,13 +61,13 @@ jobs: | |
| update-trufflehog-version: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| ref: dev | ||
| fetch-depth: 0 | ||
| token: ${{ secrets.BBOT_DOCS_UPDATER_PAT }} | ||
| - name: Set up Python | ||
| uses: actions/setup-python@v4 | ||
| uses: actions/setup-python@v5 | ||
| with: | ||
| python-version: '3.x' | ||
| - name: Install dependencies | ||
|
|
@@ -96,7 +96,7 @@ jobs: | |
| run: "sed -i '0,/\"version\": \".*\",/ s/\"version\": \".*\",/\"version\": \"${{ env.latest_version }}\",/g' bbot/modules/trufflehog.py" | ||
| - name: Create pull request to update the version | ||
| if: steps.update-version.outcome == 'success' | ||
| uses: peter-evans/create-pull-request@v5 | ||
| uses: peter-evans/create-pull-request@v7 | ||
| with: | ||
| token: ${{ secrets.BBOT_DOCS_UPDATER_PAT }} | ||
| commit-message: "Update trufflehog" | ||
|
|
@@ -109,4 +109,4 @@ jobs: | |
| branch: "update-trufflehog" | ||
| committer: blsaccess <[email protected]> | ||
| author: blsaccess <[email protected]> | ||
| assignees: "TheTechromancer" | ||
| assignees: "TheTechromancer" | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| [submodule "bbot/modules/playground"] | ||
| path = bbot/modules/playground | ||
| url = https://github.com/blacklanternsecurity/bbot-module-playground | ||
| branch = main | ||
| branch = main |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,48 @@ | ||
| # Learn more about this config here: https://pre-commit.com/ | ||
|
|
||
| # To enable these pre-commit hooks run: | ||
| # `pipx install pre-commit` or `brew install pre-commit` | ||
| # Then in the project root directory run `pre-commit install` | ||
|
|
||
| repos: | ||
| - repo: https://github.com/pre-commit/pre-commit-hooks | ||
| rev: v5.0.0 | ||
| hooks: | ||
| - id: check-added-large-files | ||
| - id: check-ast | ||
| - id: check-builtin-literals | ||
| - id: check-byte-order-marker | ||
| - id: check-case-conflict | ||
| # - id: check-docstring-first | ||
| # - id: check-executables-have-shebangs | ||
| - id: check-json | ||
| - id: check-merge-conflict | ||
| # - id: check-shebang-scripts-are-executable | ||
| - id: check-symlinks | ||
| - id: check-toml | ||
| - id: check-vcs-permalinks | ||
| - id: check-xml | ||
| # - id: check-yaml | ||
| - id: debug-statements | ||
| - id: destroyed-symlinks | ||
| # - id: detect-private-key | ||
| - id: end-of-file-fixer | ||
| - id: file-contents-sorter | ||
| - id: fix-byte-order-marker | ||
| - id: forbid-new-submodules | ||
| - id: forbid-submodules | ||
| - id: mixed-line-ending | ||
| - id: requirements-txt-fixer | ||
| - id: sort-simple-yaml | ||
| - id: trailing-whitespace | ||
|
|
||
| - repo: https://github.com/astral-sh/ruff-pre-commit | ||
| rev: v0.8.0 | ||
| hooks: | ||
| - id: ruff | ||
| - id: ruff-format | ||
|
|
||
| - repo: https://github.com/abravalheri/validate-pyproject | ||
| rev: v0.23 | ||
| hooks: | ||
| - id: validate-pyproject |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,6 @@ | ||
| [](https://github.com/blacklanternsecurity/bbot) | ||
|
|
||
| [](https://www.python.org) [](https://github.com/blacklanternsecurity/bbot/blob/dev/LICENSE) [](https://www.reconvillage.org/talks) [](https://pepy.tech/project/bbot) [](https://github.com/psf/black) [](https://github.com/blacklanternsecurity/bbot/actions?query=workflow%3A"tests") [](https://codecov.io/gh/blacklanternsecurity/bbot) [](https://discord.com/invite/PZqkgxu5SA) | ||
| [](https://www.python.org) [](https://github.com/blacklanternsecurity/bbot/blob/dev/LICENSE) [](https://www.reconvillage.org/talks) [](https://pepy.tech/project/bbot) [](https://github.com/astral-sh/ruff) [](https://github.com/blacklanternsecurity/bbot/actions?query=workflow%3A"tests") [](https://codecov.io/gh/blacklanternsecurity/bbot) [](https://discord.com/invite/PZqkgxu5SA) | ||
|
|
||
| ### **BEE·bot** is a multipurpose scanner inspired by [Spiderfoot](https://github.com/smicallef/spiderfoot), built to automate your **Recon**, **Bug Bounties**, and **ASM**! | ||
|
|
||
|
|
@@ -91,6 +91,10 @@ description: Recursive web spider | |
| modules: | ||
| - httpx | ||
|
|
||
| blacklist: | ||
| # Prevent spider from invalidating sessions by logging out | ||
| - "RE:/.*(sign|log)[_-]?out" | ||
|
|
||
| config: | ||
| web: | ||
| # how many links to follow in a row | ||
|
|
@@ -191,10 +195,10 @@ flags: | |
|
|
||
| ```bash | ||
| # everything everywhere all at once | ||
| bbot -t evilcorp.com -p kitchen-sink | ||
| bbot -t evilcorp.com -p kitchen-sink --allow-deadly | ||
|
|
||
| # roughly equivalent to: | ||
| bbot -t evilcorp.com -p subdomain-enum cloud-enum code-enum email-enum spider web-basic paramminer dirbust-light web-screenshots | ||
| bbot -t evilcorp.com -p subdomain-enum cloud-enum code-enum email-enum spider web-basic paramminer dirbust-light web-screenshots --allow-deadly | ||
| ``` | ||
|
|
||
| <!-- BBOT KITCHEN-SINK PRESET EXPANDABLE --> | ||
|
|
@@ -222,8 +226,6 @@ config: | |
| baddns: | ||
| enable_references: True | ||
|
|
||
|
|
||
|
|
||
| ``` | ||
|
|
||
| </details> | ||
|
|
@@ -236,6 +238,24 @@ Click the graph below to explore the [inner workings](https://www.blacklanternse | |
|
|
||
| [](https://www.blacklanternsecurity.com/bbot/Stable/how_it_works/) | ||
|
|
||
| ## Output Modules | ||
|
|
||
| - [Neo4j](docs/scanning/output.md#neo4j) | ||
| - [Teams](docs/scanning/output.md#teams) | ||
| - [Discord](docs/scanning/output.md#discord) | ||
| - [Slack](docs/scanning/output.md#slack) | ||
| - [Postgres](docs/scanning/output.md#postgres) | ||
| - [MySQL](docs/scanning/output.md#mysql) | ||
| - [SQLite](docs/scanning/output.md#sqlite) | ||
| - [Splunk](docs/scanning/output.md#splunk) | ||
| - [Elasticsearch](docs/scanning/output.md#elasticsearch) | ||
| - [CSV](docs/scanning/output.md#csv) | ||
| - [JSON](docs/scanning/output.md#json) | ||
| - [HTTP](docs/scanning/output.md#http) | ||
| - [Websocket](docs/scanning/output.md#websocket) | ||
|
|
||
| ...and [more](docs/scanning/output.md)! | ||
|
|
||
| ## BBOT as a Python Library | ||
|
|
||
| #### Synchronous | ||
|
|
@@ -297,6 +317,11 @@ Targets can be any of the following: | |
| - `IP_RANGE` (`1.2.3.0/24`) | ||
| - `OPEN_TCP_PORT` (`192.168.0.1:80`) | ||
| - `URL` (`https://www.evilcorp.com`) | ||
| - `EMAIL_ADDRESS` (`[email protected]`) | ||
| - `ORG_STUB` (`ORG:evilcorp`) | ||
| - `USER_STUB` (`USER:bobsmith`) | ||
| - `FILESYSTEM` (`FILESYSTEM:/tmp/asdf`) | ||
| - `MOBILE_APP` (`MOBILE_APP:https://play.google.com/store/apps/details?id=com.evilcorp.app`) | ||
|
|
||
| For more information, see [Targets](https://www.blacklanternsecurity.com/bbot/Stable/scanning/#targets-t). To learn how BBOT handles scope, see [Scope](https://www.blacklanternsecurity.com/bbot/Stable/scanning/#scope). | ||
|
|
||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,2 +1,3 @@ | ||
| # run the docker image | ||
| docker run --rm -it -v "$HOME/.bbot:/root/.bbot" -v "$HOME/.config/bbot:/root/.config/bbot" blacklanternsecurity/bbot:stable "$@" | ||
| # OUTPUTS SCAN DATA TO ~/.bbot/scans | ||
|
|
||
| docker run --rm -it -v "$HOME/.bbot/scans:/root/.bbot/scans" -v "$HOME/.config/bbot:/root/.config/bbot" blacklanternsecurity/bbot:stable "$@" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.