Download
reconFTW is an open source automated reconnaissance framework created for security researchers, penetration testers, and bug bounty hunters. The tool streamlines the reconnaissance phase of security assessments by orchestrating numerous specialized tools to gather intelligence about a target domain. It performs multiple discovery and analysis tasks such as subdomain enumeration, OSINT collection, and vulnerability scanning in an automated workflow. The framework integrates many external security utilities and coordinates them to produce comprehensive reconnaissance results efficiently. Its modular design allows users to customize the process, enabling or disabling modules and adjusting settings according to their needs. reconFTW also provides configuration options for API keys, execution preferences, and tool paths through a dedicated configuration file. By automating complex recon tasks and combining outputs from many tools, it helps researchers quickly identify potential attacks.
Features
- Automated reconnaissance workflows that coordinate multiple security tools to analyze target domains
- Subdomain enumeration techniques including passive discovery, brute forcing, and data from public sources
- Integrated vulnerability checks for issues such as XSS, SQL injection, and other common web vulnerabilities
- Modular architecture that separates functionality into modules for OSINT, scanning, and discovery tasks
- Extensive configuration system allowing customization of tools, APIs, rate limits, and execution behavior
- Support for distributed scanning through frameworks that enable large-scale reconnaissance across multiple servers
Project Samples
