FinalRecon: OSINT Tool for All-In-One Web Reconnaissance
FinalRecon
FinalRecon is a fast and simple Python script for web reconnaissance. It follows a modular structure so in the future new modules can be added with ease.
Features
![](https://cdn-0.meterpreter.org/wp-content/uploads/2024/08/header-1024x328.png)
Header Information
-
Header Information
-
Whois
-
SSL Certificate Information
-
Crawler
- html
- CSS
- Javascripts
- Internal Links
- External Links
- Images
- robots
- sitemaps
- Links inside Javascripts
- Links from Wayback Machine from Last 1 Year
- html
-
DNS Enumeration
- Over 40 types of Records are queried
- DMARC Records
-
Subdomain Enumeration
- Over 10 reliable data sources
-
Directory Enumeration
- Support for File Extensions
-
Wayback Machine
- URLs from Last 5 Years
-
Port Scan
- Fast
- Top 1000 Ports
-
Export
- Formats
- txt
- json [Coming Soon]
- Formats
![](https://cdn-0.meterpreter.org/wp-content/uploads/2024/08/whois.webp)
WHOIS
Installation
git clone https://github.com/thewhiteh4t/FinalRecon.git
cd FinalRecon
pip3 install -r requirements.txt
Configuration
API Keys
Some Modules Use API Keys to fetch data from different resources, these are optional, if you are not using an API key, they will be simply skipped. If you are interested in using these resources you can store your API key in keys.json file.
Path –> finalrecon/conf/keys.json
If you dont want to use a key for a certain data source just set its value to null
, by default values of all available data sources are null.
Facebook Developers API
This data source is used to fetch Certificate Transparency data which is used in Subdomain Enumeration
Key Format : APP-ID|APP-SECRET
Read More: https://developers.facebook.com/docs/facebook-login/access-tokens
Usage
Source: https://github.com/thewhiteh4t/