Reconic: All-in-One Reconnaissance Tool

• WHOIS Lookup: Automates the retrieval of domain registration details, providing insights into the ownership and administrative contacts of a target domain.

• DNS Resolution: Executes scans to resolve DNS records, uncovering associated domains, subdomains, and critical DNS configurations.

• SSL/TLS Certificate Inspection: Inspects SSL/TLS certificates for validity, expiration, and configuration details.

• HTTP Header Analysis: Captures HTTP headers.

• Port Scanning: Scans for open ports, identifying exposed services and potential entry points for unauthorized access.

• Subdomain Discovery: Enumerates subdomains, leveraging various techniques to map a comprehensive list of a target’s subdomains. (I’m working on speeding up subdomain queries and making DNS resolution asynchronous.)

• Directory Traversal: Searches for accessible directories, identifying potentially sensitive information or misconfigured access controls.

• JavaScript File Enumeration: Identifies and lists JavaScript files for further analysis, focusing on client-side code that may reveal vulnerabilities or sensitive information.

Each of these features is designed with precision to equip cybersecurity professionals with the necessary tools to conduct thorough and effective reconnaissance operations. By leveraging Reconic, security teams can gain invaluable insights into their targets’ network architectures, identifying vulnerabilities and securing their digital environments against emerging threats.

Install & Use

Copyright (c) 2024 Fatih