reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
TARGET OPTIONS
-d domain.tld Target domain
-m company Target company name
-l list.txt Targets list (One on each line)
-x oos.txt Exclude subdomains list (Out Of Scope)
-i in.txt Include subdomains list
MODE OPTIONS
-r, --recon Recon - Perform full recon process (without attacks)
-s, --subdomains Subdomains - Perform Subdomain Enumeration, Web probing and check for sub-tko
-p, --passive Passive - Perform only passive steps
-a, --all All - Perform all checks and active exploitations
-w, --web Web - Perform web checks from list of subdomains
-n, --osint OSINT - Check for public intel data
-c, --custom Custom - Launches specific function against target, u need to know the function name first
-h Help - Show help section
GENERAL OPTIONS
--deep Deep scan (Enable some slow options for deeper scan)
-f config_file Alternate reconftw.cfg file
-o output/path Define output folder
-v, --vps Axiom distributed VPS
-q Rate limit in requests per second
Try running the installer script again ./install.sh
If it fails for any reason try to install manually the tools missed
Finally remember to set the ${tools} variable at the start of this script
If nothing works and the world is gonna end you can always ping me :D
Running: Installing Golang tools (45)
inscope installed (1/45) hakip2host installed (2/45) puredns installed (3/45) interactsh-client installed (4/45) nuclei installed (5/45) analyticsrelationships installed (6/45) crt installed (7/45) nmapurls installed (8/45) dnsx installed (9/45) gitlab-subdomains installed (10/45) dalfox installed (11/45) gitdorks_go installed (12/45) roboxtractor installed (13/45) gau installed (14/45) Gxss installed (15/45) Unable to install katana, try manually (16/45) mapcidr installed (17/45) brutespray installed (18/45) sns installed (19/45) qsreplace installed (20/45) notify installed (21/45) dsieve installed (22/45) gotator installed (23/45) ppmap installed (24/45) subfinder installed (25/45) smap installed (26/45) crlfuzz installed (27/45) sourcemapper installed (28/45) Unable to install jsluice, try manually (29/45) Web-Cache-Vulnerability-Scanner installed (30/45) cdncheck installed (31/45) httpx installed (32/45) ffuf installed (33/45) subjs installed (34/45) github-endpoints installed (35/45) unfurl installed (36/45) anew installed (37/45) gf installed (38/45) shortscan installed (39/45) tlsx installed (40/45) mantra installed (41/45) github-subdomains installed (42/45) enumerepo installed (43/45) s3scanner installed (44/45) dnstake installed (45/45)
Running: Installing repositories (31)
dnsvalidator installed (1/31) wafw00f installed (2/31) ultimate-nmap-parser installed (3/31) Corsy installed (4/31) gitleaks installed (5/31) CMSeeK installed (6/31) SwaggerSpy installed (7/31) ffufPostprocessing installed (8/31) regulator installed (9/31) gitdorks_go installed (10/31) dorks_hunter installed (11/31) CloudHunter installed (12/31) JSA installed (13/31) trufflehog installed (14/31) pydictor installed (15/31) smuggler installed (16/31) ghauri installed (17/31) testssl installed (18/31) Web-Cache-Vulnerability-Scanner installed (19/31) Oralyzer installed (20/31) nomore403 installed (21/31) Spoofy installed (22/31) fav-up installed (23/31) massdns installed (24/31) gf installed (25/31) misconfig-mapper installed (26/31) commix installed (27/31) LeakSearch installed (28/31) urless installed (29/31) interlace installed (30/31) Gf-Patterns installed (31/31)
Running: Downloading required files
Running: Double check for installed tools
Running: Performing last configurations
Remember set your api keys:
WHOISXML API (WHOISXML_API in reconftw.cfg or env var)
Finished!
#######################################################################
when i try run ./reconftw.sh got some error
./reconftw.sh -d testphp.vulnweb.com
╦═╗┌─┐┌─┐┌─┐┌┐┌╔═╗╔╦╗╦ ╦
╠╦╝├┤ │ │ ││││╠╣ ║ ║║║
╩╚═└─┘└─┘└─┘┘└┘╚ ╩ ╚╩╝
main-v2.9-28-gc553637 by @six2dez
Usage: ./reconftw.sh [-d domain.tld] [-m name] [-l list.txt] [-x oos.txt] [-i in.txt] [-r] [-s] [-p] [-a] [-w] [-n] [-i] [-h] [-f] [--deep] [-o OUTPUT]
TARGET OPTIONS -d domain.tld Target domain -m company Target company name -l list.txt Targets list (One on each line) -x oos.txt Exclude subdomains list (Out Of Scope) -i in.txt Include subdomains list
MODE OPTIONS -r, --recon Recon - Perform full recon process (without attacks) -s, --subdomains Subdomains - Perform Subdomain Enumeration, Web probing and check for sub-tko -p, --passive Passive - Perform only passive steps -a, --all All - Perform all checks and active exploitations -w, --web Web - Perform web checks from list of subdomains -n, --osint OSINT - Check for public intel data -c, --custom Custom - Launches specific function against target, u need to know the function name first -h Help - Show help section
GENERAL OPTIONS --deep Deep scan (Enable some slow options for deeper scan) -f config_file Alternate reconftw.cfg file -o output/path Define output folder -v, --vps Axiom distributed VPS -q Rate limit in requests per second
USAGE EXAMPLES Perform full recon (without attacks): ./reconftw.sh -d example.com -r
Perform subdomain enumeration on multiple targets: ./reconftw.sh -l targets.txt -s
Perform Web based scanning on a subdomains list: ./reconftw.sh -d example.com -l targets.txt -w
Multidomain recon: ./reconftw.sh -m company -l domainlist.txt -r
Perform full recon (with active attacks) along Out-Of-Scope subdomains list: ./reconftw.sh -d example.com -x out.txt -a
Perform full recon and store output to specified directory: ./reconftw.sh -d example.com -r -o custom/path
Run custom function: ./reconftw.sh -d example.com -c nuclei_check
####################################################################### [2024-09-10 14:40:22] Checking installed tools
[] pydictor [NO] [] github-endpoints [NO] [] github-subdomains [NO] [] gitlab-subdomains [NO] [] katana [NO] [] dnsx [NO] [] Gf [NO] [] Gxss [NO] [] subjs [NO] [] unfurl [NO] [] crlfuzz [NO] [] notify [NO] [] dalfox [NO] [] puredns [NO] [] analyticsrelationships [NO] [] mapcidr [NO] [] ppmap [NO] [] cdncheck [NO] [] interactsh-client [NO] [] tlsx [NO] [] smap [NO] [] gitdorks_go [NO] [] ripgen [NO] [] dsieve [NO] [] enumerepo [NO] [] Web-Cache-Vulnerability-Scanner [NO] [] subfinder [NO] [] hakip2host [NO] [] gau [NO] [] crt [NO] [] trufflehog [NO] [] s3scanner [NO] [] mantra [NO] [] shortscan [NO] [] sns [NO] [] sourcemapper [NO] [*] jsluice [NO]
Try running the installer script again ./install.sh If it fails for any reason try to install manually the tools missed Finally remember to set the ${tools} variable at the start of this script If nothing works and the world is gonna end you can always ping me :D
[2024-09-10 14:40:22] Tools check finished #######################################################################