DOdoenerĀ·Nov 29, 2025Submission
BeeĀ·bot is a multipurpose scanner
2 points Ā· Open discussionblacklanternsecurity
bbot
Python2022ā2025
blacklanternsecurity / bbot
bbot
The recursive internet scanner for hackers. š§”
4Distinct people
4Mentions
0Explicit recommenders
11.1KGitHub stars
What to know before exploring
What it is
The recursive internet scanner for hackers. š§”
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7āNov 14 UTC Ā· Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year4 dated mentions
Observed mentions: 2022-08-23 06:00:50 UTC to 2025-11-29 12:09:52 UTC.
Counts come from the repositoryās dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
4 sourcesHaha, I had spent a considerable amount of time responding to and finding hijacks due to this issue.
After trying different scripts and tools, I believe bbot is the best tool to find these issues [1].
I am always complaining about how Azure knows what IPs, domains, tradfficmanager,etc... you have, it should validate this before letting other customers reuse them.
That said, there are difficult scenarios like: hn.com -> cname hn.westeurope.cloudapp.azure.whatever -> vm IP.
The problem that's hard for azure to fix is when you get rid of the VM and/or azure domain, azure doesn't know that your domain (hn.com in the exmaple) is using their domain as cname since you would use your own nameservers. I could enumerate hn.com, find out that a cname record in azure is nxdomain and grab/hijack it. There are many ways such hijacks can happen.
Highly
Read the rest
recommend auditing your domains with bbot (which also finds loads if other issues).
[1] https://github.com/blacklanternsecurity/bbot
BBot, an OSINT Swiss knife for everyone
10 points Ā· Open discussion