Bbot Scan
bbot_scanMap an attack surface with BBOT using presets like subdomain-enum. Runs scans synchronously when quick, otherwise returns a job ID for async status and result retrieval.
Instructions
Map attack surface with BBOT. The primary recon entrypoint.
Presets: subdomain-enum (default), cloud-enum, code-enum, email-enum, web-basic, baddns, fast. Aggressive presets (web-thorough, spider, paramminer, web-screenshots, baddns-thorough, kitchen-sink) are routed through bbot_scan_active instead, which requires approval.
Returns inline if the scan finishes within wait_seconds; otherwise returns a job_id — poll it with job_status and read results with fetch_slice.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| preset | No | subdomain-enum | |
| target | Yes | ||
| modules | No | ||
| max_events | No | ||
| wait_seconds | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||