██╗   ██╗████████╗██╗  ██╗     ██████╗ ███████╗ ██████╗ ██████╗ ███╗   ██╗
██║   ██║╚══██╔══╝╚██╗██╔╝     ██╔══██╗██╔════╝██╔════╝██╔═══██╗████╗  ██║
██║   ██║   ██║    ╚███╔╝█████╗██████╔╝█████╗  ██║     ██║   ██║██╔██╗ ██║
╚██╗ ██╔╝   ██║    ██╔██╗╚════╝██╔══██╗██╔══╝  ██║     ██║   ██║██║╚██╗██║
 ╚████╔╝    ██║   ██╔╝ ██╗     ██║  ██║███████╗╚██████╗╚██████╔╝██║ ╚████║
  ╚═══╝     ╚═╝   ╚═╝  ╚═╝     ╚═╝  ╚═╝╚══════╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═══╝

vtx-recon (Python)

Secret intelligence for authorized engagements — find a key, then prove what it can actually do.

⚠️ Authorized use only. vtx-recon is for security testing of systems you are explicitly authorized to test (an in-scope bug-bounty program or signed engagement). Unauthorized use may violate the US CFAA, the UK Computer Misuse Act, and equivalent laws. Provided "as is", no warranty, no liability.

TruffleHog finds secrets and verifies they're live; vtx-recon picks up from there — it runs ordered, read-only capability ladders across 51 providers to prove depth of access, tiers each key as PROVEN / VALID / DENIED, and emits a redacted, timestamped evidence bundle.

Safe, read-only probes run by default. Probes that cost money, read PII, or change state are gated and unreachable unless you pass both --prove and --i-am-authorized "<scope>" — enforced in code, fail-closed.

Install

pipx install vtx-recon     # requires the trufflehog binary on PATH

Quick start

vtx-recon find . --i-am-authorized "bugbounty:acme"
echo "AIza..." | vtx-recon ladder --i-am-authorized "bugbounty:acme" --json

Full documentation, the complete 51-provider capability-ladder reference, and the safety model are in the project README.

Built by VTX Labs · MIT License · see TERMS.