The Bug Bounty Reconnaissance Framework (BBRF) can be used to coordinate your reconnaissance workflows across multiple devices. For more background, read the original blog post.
If you are new to BBRF, you will need to deploy a BBRF server and start using the BBRF client before you can enjoy this dashboard.
If you like browsing through your recon data with a GUI, you can use the BBRF dashboard on https://bbrf.me. Just plug in your server URL, username and password, and the dashboard will pull your data and make it searchable. Note that all communication to the server happens via your browser, so your data remains safe!
- Select a program and view the program details;
- View your domains, IPs, URLs and services in a clear overview;
- Click an IP or domain to view the full document;
- Switch between unresolved and resolved domains;
- Filter your data with the search boxes on the data tables;
- Copy all identifiers from the first column with the "Copy to clipboard" button below the data tables;
- Data tables are automatically limited to show the first 2000 records of every view, click "load more" to continue loading more records; (Note that this will impact the memory use of your browser);
- Communication with the BBRF server happens via API calls from the client-side application directly to your server to avoid credentials and/or recon data passing through any additional servers;
- View your BBRF alerts right from the dashboard;
The dashboard requires your server to be available via HTTPS, and that https://bbrf.me is allowed as a CORS origin on your BBRF server.