Skip to content

Latest commit

 

History

7 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 

Repository files navigation

Recon_Framework

Recon Framework

A modern AI-assisted reconnaissance and attack surface mapping framework built for penetration testers, red teamers, and bug bounty hunters.

Overview

Recon Framework automates the reconnaissance workflow used during web application and infrastructure assessments. It combines subdomain enumeration, live host detection, port scanning, technology fingerprinting, URL discovery, screenshot automation, and vulnerability scanning into a centralized workflow.

The project is designed to reduce manual repetitive tasks while providing organized outputs for further security testing.

Features

Passive Reconnaissance

  • Subdomain enumeration
  • Certificate Transparency log collection
  • ASN and infrastructure discovery
  • DNS record analysis
  • Cloud asset discovery

Active Enumeration

  • Live host probing
  • Port scanning
  • Service fingerprinting
  • Technology detection
  • HTTP response analysis

URL & Endpoint Discovery

  • Historical URL collection
  • JavaScript endpoint extraction
  • API discovery
  • Parameter harvesting
  • Crawling and spidering

Vulnerability Discovery

  • Basic security header analysis
  • CORS misconfiguration checks
  • Open redirect detection
  • Basic XSS reflection checks
  • Nuclei integration

Visual Recon

  • Automated screenshots
  • Web panel previews
  • Organized evidence collection

Reporting

  • Structured output directories
  • JSON and text exports
  • Markdown report generation
  • Scan summaries

Tech Stack

  • Python
  • Flask / FastAPI
  • SQLite / PostgreSQL
  • Bash scripting
  • Asyncio
  • Docker (optional)

Integrated Tools

This framework supports integration with popular offensive security tools including:

  • subfinder
  • amass
  • assetfinder
  • httpx
  • naabu
  • nuclei
  • katana
  • gau
  • waybackurls
  • nmap
  • dnsx

Goals

  • Centralize reconnaissance workflows
  • Improve offensive security automation
  • Organize findings efficiently
  • Reduce repetitive manual work
  • Enhance productivity during assessments

Use Cases

  • Bug bounty reconnaissance
  • External attack surface mapping
  • Internal security assessments
  • Red team operations
  • Pentesting engagements
  • Security research

Planned Features

  • AI-assisted finding summaries
  • Team collaboration dashboard
  • Scheduled scans
  • Asset tracking
  • CVE correlation
  • Screenshot comparison
  • Notification system
  • Report PDF export

Disclaimer

This project is intended for educational purposes and authorized security testing only. Users are responsible for complying with all applicable laws and regulations.

Unauthorized scanning or testing of systems without permission is strictly prohibited.

About

Recon Framework automates the reconnaissance workflow used during web application and infrastructure assessments. It combines subdomain enumeration, live host detection, port scanning, technology fingerprinting, URL discovery, screenshot automation, and vulnerability scanning.

Resources

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages