Overview

reconx-py provides penetration testers, bug bounty hunters, and security researchers with nine focused reconnaissance tools, exposed both as clean asynchronous Python functions and as a reconx command-line interface. Each tool works standalone with no configuration. An optional AI agent adds a natural-language layer that maps plain-English requests to the correct tool, runs it, and returns an explanation. The agent works with any OpenAI-compatible API, including OpenAI, DeepSeek, OpenRouter, and Groq.

Installation

pip install reconx-py

Optional WHOIS enrichment for the osint command:

pip install "reconx-py[whois]"

Library usage

import asyncio
from reconx import scan_website, find_subdomains, check_breach

print(asyncio.run(scan_website("example.com")))
print(asyncio.run(find_subdomains("github.com")))

Every tool returns a plain dict.

All functions are asynchronous except analyze_jwt, which runs fully offline.

Command-line usage

reconx scan example.com
reconx subdomains github.com --json
reconx jwt "eyJhbGci..."
reconx email-sec github.com
reconx waf cloudflare.com

Add --json to any command for raw JSON output.

AI agent (optional)

Bring any OpenAI-compatible API key.

import asyncio
from reconx.agent import ask

asyncio.run(ask("scan example.com and explain the risks", api_key="sk-..."))

export OPENAI_API_KEY=sk-...
# For a non-OpenAI provider, also set:
# export OPENAI_BASE_URL=https://openrouter.ai/api/v1
# export OPENAI_MODEL=openai/gpt-4o-mini
reconx ask "does cloudflare.com have a WAF?"

The agent selects the correct tool, executes it, and explains the findings in plain English. Requests go only to the provider you configure.

Design notes

• Light dependencies: httpx and dnspython only.
• Data sources such as crt.sh and LeakCheck are free public services and can be rate-limited or briefly unavailable. Tools degrade gracefully and return a note rather than raising.
• Set GITHUB_TOKEN to raise the GitHub API rate limit for scan_github.
• Authorized testing only. Scan targets you own or have written permission to test.

Who it is for

Bug bounty hunters, penetration testers, red teams, and security researchers who want a scriptable Python reconnaissance toolkit, plus anyone who prefers to query an AI security assistant in plain English instead of memorizing commands.

Keywords

Python security tools, OSINT library, reconnaissance toolkit, subdomain enumeration, WAF detection, JWT decoder, email breach lookup, SPF and DMARC checker, GitHub secret scanning, typosquatting detection, bug bounty, penetration testing, AI security agent, LLM tool calling.

License

MIT. Copyright (c) 2025 Muhammad Adil.