A modern AI-assisted reconnaissance and attack surface mapping framework built for penetration testers, red teamers, and bug bounty hunters.
Recon Framework automates the reconnaissance workflow used during web application and infrastructure assessments. It combines subdomain enumeration, live host detection, port scanning, technology fingerprinting, URL discovery, screenshot automation, and vulnerability scanning into a centralized workflow.
The project is designed to reduce manual repetitive tasks while providing organized outputs for further security testing.
- Subdomain enumeration
- Certificate Transparency log collection
- ASN and infrastructure discovery
- DNS record analysis
- Cloud asset discovery
- Live host probing
- Port scanning
- Service fingerprinting
- Technology detection
- HTTP response analysis
- Historical URL collection
- JavaScript endpoint extraction
- API discovery
- Parameter harvesting
- Crawling and spidering
- Basic security header analysis
- CORS misconfiguration checks
- Open redirect detection
- Basic XSS reflection checks
- Nuclei integration
- Automated screenshots
- Web panel previews
- Organized evidence collection
- Structured output directories
- JSON and text exports
- Markdown report generation
- Scan summaries
- Python
- Flask / FastAPI
- SQLite / PostgreSQL
- Bash scripting
- Asyncio
- Docker (optional)
This framework supports integration with popular offensive security tools including:
- subfinder
- amass
- assetfinder
- httpx
- naabu
- nuclei
- katana
- gau
- waybackurls
- nmap
- dnsx
- Centralize reconnaissance workflows
- Improve offensive security automation
- Organize findings efficiently
- Reduce repetitive manual work
- Enhance productivity during assessments
- Bug bounty reconnaissance
- External attack surface mapping
- Internal security assessments
- Red team operations
- Pentesting engagements
- Security research
- AI-assisted finding summaries
- Team collaboration dashboard
- Scheduled scans
- Asset tracking
- CVE correlation
- Screenshot comparison
- Notification system
- Report PDF export
This project is intended for educational purposes and authorized security testing only. Users are responsible for complying with all applicable laws and regulations.
Unauthorized scanning or testing of systems without permission is strictly prohibited.