blacklanternsecurity

The recursive internet scanner for hackers. 🧡

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

A library for detecting known secrets across many web frameworks

A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

Check subdomains for subdomain takeovers and other DNS tomfoolery

Offensive security toolkit for Claude Code

Collection of offensive tools targeting Microsoft Azure

Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes

Check whether an IP address or hostname belongs to popular cloud providers

Import, visualize, and analyze SpiderFoot scans in Neo4j, a graph database

credshed - a scalable database for credential leaks. Written in Python, it can easily ingest poorly-formatted files or entire directories into a searchable database. MongoDB is used in the backend.

Visualize BBOT scans in realtime with VivaGraphJS

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

A persistent database + CLI for your BBOT scan data 🧡