Comparison to Other Tools

BBOT does a lot more than just subdomain enumeration. However, subdomain enumeration is arguably the most important part of OSINT, and since there's so many subdomain enumeration tools out there, they're the easiest class of tool to compare it to.

Thanks to BBOT's recursive nature (and its massdns module with its NLP-powered subdomain mutations), it typically finds about 20-25% more than other tools such as Amass or theHarvester. This holds true even for larger targets like delta.com (1000+ subdomains):

Subdomains Found

Runtimes (Lower is Better)

For a detailed analysis of this data, please see Subdomain Enumeration Tool Face-Off