Skip to content

README.md

Latest commit

 

History

History
348 lines (260 loc) · 8.57 KB

README.md

File metadata and controls

348 lines (260 loc) · 8.57 KB

Version Python License Platform

🛡️ ReConing v1.0

Enterprise Reconnaissance & Attack Surface Management Framework

NovaRecon is a professional-grade reconnaissance framework designed for
authorized security professionals, penetration testers, and bug bounty hunters.

"Know your target before they know you."

📋 Table of Contents

🚀 Features

# Module Description
🔍 Port Scanner Scans 22+ common ports with service fingerprinting & banner grabbing
🌐 Tech Detector Identifies 18+ web technologies (CMS, frameworks, servers, CDNs)
🕷️ Web Crawler Crawls websites, extracts URLs, forms, emails, & hidden comments
🔑 JS Secret Hunter 25+ regex patterns to find API keys, tokens, passwords in JavaScript
📡 OSINT Engine Subdomain enumeration, DNS records, WHOIS lookup
🛡️ WAF Detector Identifies 12+ WAF/CDN providers (Cloudflare, Akamai, AWS, etc.)
📊 Report Generator Saves results in structured JSON format for further analysis

📥 Installation

Linux (Kali/Ubuntu/Debian)

# Step 1: Update packages
sudo apt update -y

# Step 2: Clone or download the project
git clone https://github.com/tyranroot/ReConing.git

# Step 3: Open Folder
cd ReConing

# Step 4: Create Virual venv
python3 -m venv venv

# Step 5: Execute venv
source venv/bin/activate

# Step 6: Install Dependencies
pip3 install -r requirements.txt

# Step 7: One-command setup
python3 setup.py

# Step 8: Verify installation
python3 main.py --help

Termux (Android)

# Step 1: Update packages
pkg update -y

# Step 2: Install Python
pkg install python python-pip git -y

# Step 3: Clone the project
git clone https://github.com/tyranroot/ReConing.git

# Step 4: Open Folder
cd ReConing

# Step 4: Install dependencies
pip install aiohttp beautifulsoup4 colorama dnspython python-whois

# Step 5: Run
python main.py --help

Windows

# Step 1: Install Python from python.org (Python 3.8+)
# Step 2: Open Command Prompt or PowerShell as Administrator
# Step 3: Download Project
https://github.com/tyranroot/ReConing
cd ReConing

# Step 3: Install dependencies
pip install aiohttp beautifulsoup4 colorama dnspython python-whois

# Step 4: Run
python main.py --help

🎯 Usage

python3 main.py <command> <target> [options]

Commands:
  quick       Fast scan (ports + technology only)
  full        Full reconnaissance (all modules)
  scan-port   Port scanning only
  scan-js     JavaScript secret hunting only
  scan-tech   Technology detection only
  scan-osint  OSINT gathering only
  scan-waf    WAF detection only

Options:
  -o, --output FILE  Save results to specific file
  -v, --verbose      Enable verbose output
  -h, --help         Show help message

📦 Modules

🔍 Port Scanner

Scans 22 common ports including SSH (22), HTTP (80), HTTPS (443), MySQL (3306), RDP (3389), and more. Performs banner grabbing for service version detection.

python3 main.py scan-port example.com

🌐 Tech Detector

Identifies web technologies using HTTP headers, HTML content analysis, and JavaScript signatures. Detects CMS, frameworks, CDNs, and analytics tools.

python3 main.py scan-tech https://example.com

🕷️ Web Crawler

Crawls websites up to 20 pages, extracting:

  • All discovered URLs
  • Form fields and actions
  • Email addresses
  • HTML comments (potential secrets)
  • Linked JavaScript files
python3 main.py scan-tech https://example.com  # Runs with full scan

🔑 JS Secret Hunter

Scans JavaScript files for hardcoded secrets. Uses 25+ regex patterns:

Pattern Targets
AWS Keys Access Key, Secret Key
Google API Key, OAuth Client
GitHub Personal Access Token, OAuth Token
JWT JSON Web Tokens
Slack Bot Token, Webhook URL
Discord Bot Token, Webhook URL
Telegram Bot Token
Stripe Live/Secret Keys
Database MongoDB, MySQL, PostgreSQL, Redis URLs
Private Keys RSA, DSA, EC, OpenSSH
Passwords Hardcoded credentials 
python3 main.py scan-js https://example.com

📡 OSINT Engine

Gathers open-source intelligence:

  • Subdomain enumeration (20+ common subdomains)
  • DNS record lookup (A, MX, NS)
  • WHOIS information (registrar, dates, name servers)
python3 main.py scan-osint example.com

🛡️ WAF Detector

Detects Web Application Firewalls:

  • Cloudflare, Akamai, AWS WAF, Sucuri
  • ModSecurity, F5 BIG-IP, Imperva
  • Fastly, StackPath, Barracuda, Wordfence, Varnish
  • Tests WAF blocking capability with malicious payloads
python3 main.py scan-waf https://example.com

📊 Output

Results are saved as JSON files in the output/ directory:

{
  "target": "example.com",
  "scan_type": "port_scan",
  "duration": 2.5,
  "status": "completed",
  "data": {
    "open_ports": [
      {"port": 80, "service": "HTTP", "banner": "Apache/2.4.41"},
      {"port": 443, "service": "HTTPS", "banner": "nginx/1.24.0"}
    ],
    "total_open": 2
  }
}

Output filename format: novarecon_results_YYYYMMDD_HHMMSS.json

💻 Examples

Quick Scan

python3 main.py quick https://example.com

⏱️ ~3 seconds | Checks ports and technology

Full Reconnaissance

python3 main.py full https://example.com

⏱️ ~10-15 seconds | Runs all 6 modules

JavaScript Secret Hunting

python3 main.py scan-js https://example.com

🔍 Extracts API keys, tokens, and endpoints from JS files

OSINT Gathering

python3 main.py scan-osint example.com

🌐 Finds subdomains, DNS records, and WHOIS info

WAF Detection

python3 main.py scan-waf https://example.com

🛡️ Identifies WAF/CDN providers

Custom Target

# Any website
python3 main.py full https://google.com

# IP address
python3 main.py scan-port 192.168.1.1

# Blog
python3 main.py quick https://medium.com

# Your own site for testing
python3 main.py full https://your-own-site.com

📋 Requirements

Package Purpose
Python 3.8+ Core language
aiohttp Async HTTP requests
beautifulsoup4 HTML parsing
colorama Colored terminal output
dnspython DNS lookups
python-whois WHOIS queries

🖥️ Supported Platforms

Platform Status Notes
🐧 Kali Linux ✅ Full Best performance
🐧 Ubuntu/Debian ✅ Full
📱 Termux (Android) ✅ Mostly Some features limited
🪟 Windows ✅ Mostly WHOIS may need extra setup
🍎 macOS ✅ Mostly Tested on Intel/Apple Silicon

⚠️ Disclaimer

NovaRecon is designed for authorized security testing only.

By using this tool, you agree to:

  1. Only scan targets you own or have explicit written permission to test
  2. Comply with all applicable local, state, and federal laws
  3. Accept full responsibility for your actions

Unauthorized scanning may violate:

  • Computer Fraud and Abuse Act (CFAA) — US
  • Computer Misuse Act — UK
  • Information Technology Act — India
  • Similar laws in other jurisdictions

The developers assume no liability for misuse of this framework.

📝 License

This project is licensed under the MIT License - see the LICENSE file for details.

📧 Connect & Support

Have questions, collaboration proposals, or custom penetration testing requests? Feel free to reach out to our primary channels: