reconic1 1.6.2

All-in-One Reconnaissance Tool for Penetration Testing and Bounty Hunting

Reconic | All-in-One Reconnaissance Tool

Reconic is a network scanning and discovery tool designed to empower cybersecurity professionals and bug hunters in mapping, analyzing and securing digital infrastructures.

Features

• WHOIS Lookup: Automates the retrieval of domain registration details, providing insights into the ownership and administrative contacts of a target domain.

• DNS Resolution: Executes scans to resolve DNS records, uncovering associated domains, subdomains, and critical DNS configurations.

• SSL/TLS Certificate Inspection: Inspects SSL/TLS certificates for validity, expiration, and configuration details.

• HTTP Header Analysis: Captures HTTP headers.

• Port Scanning: Scans for open ports, identifying exposed services and potential entry points for unauthorized access.

• Subdomain Discovery: It gives a list of subdomains that do not return 404 with the DNS zone method.

• Directory Traversal: Searches for accessible directories, identifying potentially sensitive information or misconfigured access controls.

• JavaScript File Enumeration: Identifies and lists JavaScript files for further analysis, focusing on client-side code that may reveal vulnerabilities or sensitive information.

Each of these features is designed with precision to equip cybersecurity professionals with the necessary tools to conduct thorough and effective reconnaissance operations. By leveraging Reconic, security teams can gain invaluable insights into their targets' network architectures, identifying vulnerabilities and securing their digital environments against emerging threats.

---

Screenshots

Installation

To ensure a smooth and effective setup of Reconic, follow the step-by-step instructions below. These steps will guide you through installing the necessary dependencies using pip and a requirements.txt file, preparing your environment for Reconic's operation.

Prerequisites

Before proceeding with the installation, ensure you have the following prerequisites met:

• Python 3.6 or newer installed on your system. Reconic is developed with compatibility for Python 3.6 and above.
• pip, Python's package installer, is up-to-date. You can update pip using the command: python -m pip install --upgrade pip.

Installation Steps

1. Clone the Repository

   Begin by cloning the Reconic repository to your local machine. Open a terminal and run the following command:

   git clone https://github.com/fkkarakurt/reconic
   

2. Navigate to the Project Directory

   Change into the cloned project's directory:

   cd reconic
   

3. Create a Virtual Environment (Optional)

   It's recommended to create a virtual environment to isolate project dependencies. Run the following command to create a virtual environment named venv:

   python3 -m venv venv
   

   Activate the virtual environment:

   • On Windows: .\venv\Scripts\activate
   • On Unix or MacOS: source venv/bin/activate

4. Install Dependencies

   Reconic's dependencies are listed in the requirements.txt file. Install them using pip:

   pip install -r requirements.txt
   

   This command will automatically download and install all the necessary packages defined in the requirements.txt file.

5. Verify Installation

   Once the installation process is complete, you can verify that Reconic has been installed correctly by running a simple help command.

   python3 reconic.py --help
   

Updating Reconic

To update Reconic to the latest version, pull the latest changes from the repository and reinstall the dependencies:

git pull origin main
pip install -r requirements.txt

Ensure you're in the Reconic project directory and your virtual environment is activated when performing the update.

Usage/Examples

To start using Reconic, you will need to specify a target URL using the -u or --url flag, along with a choice between using HTTP or HTTPS for web technology detection.

1. If you want to perform the scan using HTTPS, you can use the following command:

python3 reconic.py -u <target-url> --https

2. Alternatively, to force the scan over HTTP, use:

python3 reconic.py -u <target-url> --http

3. You will see the results neatly in tables on your command line. Also, after the scan is finished, an HTML file will be created in the output directory of the main folder. You can also review the same results in your web browser.

./output/<target-url>.html

---

IMPORTANT! Reconic was developed to assist with bug bounty and penetration testing. Do not use this for malicious purposes. For any target URL you will crawl with Reconic, make sure you have the necessary permissions. This is a crime wherever you are.

License