RECON PRO - Ultimate Web Reconnaissance

Active Development    Python 3.x    Linux/Kali    MIT License

---

Overview

Recon Pro is an advanced automated reconnaissance framework designed for Bug Bounty Hunters and Pentesters. It combines multiple open-source intelligence (OSINT) tools with custom Python scripting to deliver a comprehensive security analysis of target domains.

Why Recon Pro?
Unlike simple wrapper scripts, Recon Pro performs intelligent technology detection, context-aware fuzzing, and smart vulnerability checks (XSS, SQLi, Sensitive Files) tailored to the target's stack (Node.js, PHP, Python, etc.).

---

Key Features

1. Automated Subdomain Discovery

• Multi-Source Intelligence: Integrates powerful tools like Subfinder, Assetfinder, Amass, and Findomain.
• API Leverage: Uses Shodan, SecurityTrails, and crt.sh for maximum coverage.
• Smart Fallback: Automatically switches to brute-force DNS if passive sources yield low results.
• Live Classification: Automatically categorizes subdomains into:
  • Web Active (HTTP/HTTPS)
  • DNS Only
  • Filtered/Timeouts

2. Intelligent Fuzzing & Exploitation

• Tech-Aware Payloads: Detects technologies (e.g., Laravel, React, Wordpress) and adjusts payloads accordingly.
• Vulnerability Scanner: Checks for:
  • Reflected XSS (Context-aware)
  • SQL Injection (Error-based)
  • Sensitive Files (.env, .git, backups)
  • Admin Panels & Login Interfaces
• Google Dorking: Automates search queries to find sensitive exposed data.

3. Professional Reporting

• Generates a beautiful HTML Dashboard for analyzing results.
• Interactive Summary: view live hosts, technologies, and critical findings in a clean interface.
• Auto-Open: Option to automatically open the report upon completion.

---

Gallery

Recon Pro HTML Dashboard Preview

Professional CLI Output

---

Installation

We provide a robust installer (install.sh) that sets up your environment automatically.

Prerequisites

• OS: Linux (Kali, Ubuntu, or Debian)
• Python: 3.7+
• Sudo Access: Required for system packages.

Quick Start

# 1. Clone the repository
git clone https://github.com/chdevsec/recon_pro.git
cd recon_pro

# 2. Give execution permissions
chmod +x install.sh

# 3. Run the installer
./install.sh

---

Usage

The tool operates in different modes to suit your reconnaissance needs.

Level 1: Basic Scan (Standard)

Run the tool against a target domain. You will be prompted to interactively select the target technology (e.g., PHP, Node.js) to tailor the payloads.

python3 recon.py target.com

Level 2: Focused Dorking (Intermediate)

Refine your Google Dorking to look for specific vulnerability types only, reducing noise and API usage.

# Search only for login portals and admin panels
python3 recon.py target.com --dork-type login

# Search only for sensitive files (.env, .sql, backups)
python3 recon.py target.com --dork-type files

Level 3: Deep Recon (Advanced)

Use Soft Mode to capture all DNS records, including subdomains that did not respond to HTTP probing (Timeouts/Connection Refused). This is useful to broaden the attack surface beyond just web servers.

# Enable Soft Mode (Includes DNS-only results in the report)
python3 recon.py target.com --mode soft

---

Configuration

To enable API-based recon (Shodan, SecurityTrails, etc.), edit the recon.py file and add your keys:

# API Configuration in recon.py
API_KEYS = {
    "SECURITYTRAILS": "YOUR_KEY_HERE", 
    "SHODAN": "YOUR_KEY_HERE", 
    "GOOGLE_API_KEY": "YOUR_KEY_HERE", 
    "GOOGLE_CSE_ID": "YOUR_CX_ID_HERE" 
}

---

## <img src="assets/icons/fc869.png" width="30" style="vertical-align: middle;"> Troubleshooting

### <img src="assets/icons/fc859.png" width="20" style="vertical-align: middle;"> Permission Denied Error
If you encounter a `PermissionError` when generating reports (e.g., `[Errno 13] Permission denied`), it means the output directory is owned by `root`. This usually happens if you ran the tool with `sudo` previously.

**Solution:**
Fix the permissions for your current user by running:

```bash
sudo chown -R $USER:$USER .

---

Legal Disclaimer

Recon Pro is intended for educational and authorized security testing purposes only.

• Do not use this tool against systems you do not have explicit permission to test.
• The developers (CHDEVSEC) assume no liability and are not responsible for any misuse or damage caused by this program.
• Always follow responsible disclosure policies.

---

License

This project is licensed under the MIT License - see the LICENSE file for details.

---

Developed by CHDEVSEC | Pentester Caio

Happy Hacking!