Raccoon is a high-performance offensive security tool designed to assist with reconnaissance and vulnerability scanning during penetration testing and security assessments. It automates several common reconnaissance tasks, allowing security professionals to quickly gather information about a target system or web application. The tool combines multiple scanning techniques into a single workflow, helping users identify potential weaknesses, exposed services, and accessible resources on a target host. Raccoon can perform DNS enumeration, subdomain discovery, and URL fuzzing to uncover hidden endpoints and infrastructure components. It also integrates network scanning capabilities through tools such as Nmap to detect open ports, services, and potential vulnerabilities. By consolidating these reconnaissance tasks into a single command-line interface, Raccoon aims to streamline the early phases of security testing and provide actionable information for further investigation.
Features
- Automated reconnaissance and vulnerability scanning workflow
- DNS record enumeration for discovering domain information
- Subdomain brute-forcing to identify additional hostnames
- URL fuzzing using customizable wordlists to discover hidden endpoints
- Integration with Nmap for port and service scanning
- Optional proxy and Tor routing for anonymized HTTP requests