https://cybertoolchain.io/tools/bbot New releases and features in bbot, tracked by The Cyber Toolchain. en Mon, 24 Aug 2026 14:31:46 GMT https://github.com/blacklanternsecurity/bbot/releases/tag/v3.0.2 https://github.com/blacklanternsecurity/bbot/releases/tag/v3.0.2 Mon, 24 Aug 2026 14:31:46 GMT BBOT v3.0.2 adds a new `js-audit` preset and surfaces HTTP decode errors as tagged `decode-error` events. • New `js-audit` preset at `bbot/presets/web/js-audit.yml` runs trufflehog against HTTP bodies (streamed via stdin), includes the source URL on findings, and sets `_module_threads` to 2. • Adds `decode-error` tag to `HTTP_RESPONSE` events when a response body cannot be decoded, preventing undecoded content from being treated as valid body data. • Raises process pool `max_tasks_per_child` from 25 to 250, enabling more sustained parallel workloads before worker recycling. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bbot https://github.com/blacklanternsecurity/bbot/releases/tag/v3.0.0 https://github.com/blacklanternsecurity/bbot/releases/tag/v3.0.0 Wed, 08 Jul 2026 15:17:12 GMT BBOT 3.0 brings new HTTP/DNS engines, unified findings, 10+ new modules, and pydantic-validated config. • New in-process, rate-limited HTTP engine (blasthttp) replaces the external httpx subprocess for all web traffic. • New DNS resolution engine (BlastDNS) with bounded LRU caches and noisy PTR flood filtering. • Pydantic-validated config and preset system catches typos and type errors before a scan starts. • Scope reworked: `-t/--targets` defines scope and `-s/--seeds` drives the scan; ASNs now usable as scan targets. • Findings and Vulnerabilities unified into a single event type carrying Severity and Confidence. • New `--reset-config` / `--reset-secrets` flags to regenerate stale config files. • New `--no-color` flag for color-free output. • Output modules are now additive; new `exclude_output_modules` option lets you opt individual modules out. • New output modules: MongoDB, Elasticsearch, Kafka, RabbitMQ, ZeroMQ, and NATS. • New `legba` module for credential brute-forcing across many services. • New `trajan` module for misconfiguration scanning across GitHub, GitLab, Azure DevOps, Jenkins, and JFrog. • New `virtualhost` module for virtual-host fuzzing. • New `waf_bypass` module for WAF-bypass detection. • New `shodan_enterprise` module for Shodan Enterprise API integration. • New Hetzner object-storage bucket enumeration module. • Lightfuzz overhaul adds SSRF and ESI submodules with a default WAF filter and reduced false positives. • HTTP wildcard/catch-all host detection cuts false positives on catch-all servers. • Findings de-duplicated in output and a severity breakdown shown in the status line. • Supported Python range expanded to 3.10–3.14. Breaking changes: • `-s` now means `--seeds` (not `--silent`); scripts passing `-s` for quiet output will instead add a seed with no error. Silent output moved to `-S`/`--silent`. • `--whitelist` was removed; use `-t/--targets` to define scope. • `--allow-deadly` was removed. • The `noisy` flag was renamed to `loud` (and other flags were similarly renamed). • Module options are now pydantic-validated; the legacy per-module options dict hard-fails on upgrade. • Some event types, event attributes, and config keys were renamed or removed. • Modules wappalyzer, smuggler, digitorus, sitedossier, passivetotal, and wpscan were removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/bbot