> ## Documentation Index
> Fetch the complete documentation index at: https://docs.d0pam1ne.blackhatethicalhacking.com/llms.txt
> Use this file to discover all available pages before exploring further.

# The Black Hole Beacon

> Internal network discovery: one lean agent inside the client site, and the console reaches deeper through it.

![D0pam1ne Black Hole Beacon](https://mintcdn.com/black-hat-ethical-hacking/iJ6e2K_ccNWGNh0L/images/wordmark-beacon.svg?fit=max\&auto=format\&n=iJ6e2K_ccNWGNh0L\&q=85\&s=407f0a2bdffc7757a29baf985a44f3f3)

The **Black Hole Beacon** is the internal side of D0pam1ne. Where recon maps a client from the internet, the beacon maps it from the inside: you drop one lightweight agent on a machine in each client site, it discovers every device around it, and the console then reaches deeper through it with internal recon and internal attacks. Nothing is installed on the client's other machines.

Everything it finds lands in the **same project** as ordinary hosts, services and findings, tagged **Internal** and filed under the beacon's **site**, so a test can cover the external surface, the internal network or both, and a report can carry either side or the two together.

![How the Black Hole Beacon feeds D0pam1ne Pro](https://mintcdn.com/black-hat-ethical-hacking/njBxAGOkxAd3KJ5B/images/suite-flow.svg?fit=max\&auto=format\&n=njBxAGOkxAd3KJ5B\&q=85\&s=fd00e0c3ca6fc203c88d920242436dbd)

Where the beacon sits: inside the client network, feeding D0pam1ne Pro outbound only

## How it works

**1. Deploy**

Name the beacon, label its site, pick the platform and run the one-line installer on a machine inside the client network. See [Deploy a beacon](https://docs.d0pam1ne.blackhatethicalhacking.com/beacon/deploy.md).

**2. Discover Assets**

The beacon sweeps its own network without any pivot: every live device with its OS, device type, vendor and MAC, and the Wi-Fi around it. This sweep is the baseline everything else builds on. See [Discover Assets](https://docs.d0pam1ne.blackhatethicalhacking.com/beacon/discover-assets.md).

**3. Internal Recon**

The console scans hosts, ranges and ports through the beacon's pivot, then adds service versions, live web, crawling, TLS checks, screenshots and nuclei. See [Internal Recon](https://docs.d0pam1ne.blackhatethicalhacking.com/beacon/internal-recon.md).

**4. Internal Attacks**

Evidence-driven attacks against what recon proved, through the same pivot, filed as internal findings for review. See [Internal Attacks](https://docs.d0pam1ne.blackhatethicalhacking.com/beacon/internal-attacks.md).

**5. Review and report**

Internal findings land in the same Needs Review inbox as the external ones. Report them in the pentest report, hand over an [Asset Mapping Report](https://docs.d0pam1ne.blackhatethicalhacking.com/reporting/asset-mapping-report.md) of the whole internal network, and send them to the client through [Synapse](https://docs.d0pam1ne.blackhatethicalhacking.com/synapse/overview.md).

## What makes it safe to run inside a client

> [card] Outbound only
>
> The agent only ever connects out to your console on a fixed interval. The console never reaches in, so it works from behind NAT and needs no inbound port or firewall change at the client.

> [card] One-time enrolment
>
> The install command carries a one-time token that is traded for a long-lived agent key and then rotated out. Only the key's hash is stored, and a copied command cannot enrol a second agent.

> [card] Kill switch
>
> One click revokes a beacon. On its next check-in it reads the revoke and uninstalls itself from the host. The assets it already found stay in the project.

> [card] Nothing to fetch
>
> The agent is a single dependency-free Go binary for macOS, Linux and Windows, served by your own console. Customers never compile anything and nothing is downloaded from outside.

## Where to find it

The beacon has its own **Internal Pentest** section in the sidebar of an open project, in shades of the beacon's electric indigo, next to External Pentest. It holds three groups: **Beacon & Pivoting** (the Black Hole Beacon overview and Deploy), **Map & Attack** (Discover Assets, Internal Recon, Internal Attacks) and **Internal Results** (Internal Assets, the Wireless Rogue Detector and the Asset Mapping Report). The [Command Center](https://docs.d0pam1ne.blackhatethicalhacking.com/concepts/command-center.md) has its own Black Hole Beacon band across every client: beacons online, internal assets found and a card per beacon.

> [!NOTE]
>
> The Black Hole Beacon is a paid module, licensed on its own and separately from Synapse. A standard build shows none of it until an admin activates a licence that includes it under **System, Licenses**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.