Pentest Recon Toolkit
IMPORTANT: This tool is for AUTHORIZED security testing only. Always obtain written permission before testing any target.
Purpose
Passive reconnaissance for penetration testing engagements. All data collection is based on publicly available sources (OSINT).
Features
- WHOIS lookup and domain registration analysis
- DNS record enumeration (A, AAAA, MX, NS, TXT, CNAME, SOA)
- SSL/TLS certificate transparency log search
- Subdomain discovery via certificate transparency
- Technology stack fingerprinting
- Open port detection (non-intrusive SYN scan)
Usage
python scripts/recon.py --target example.com --mode passive
python scripts/recon.py --target example.com --mode full --output report.json
python scripts/subfinder.py --domain example.com --wordlist common.txt
python scripts/tech_detect.py --target https://example.com
Legal Disclaimer
This tool must only be used on systems you own or have explicit permission to test. Unauthorized scanning may violate computer fraud laws.
