Recon Tools 101

• Recon tools 101 is made up of a number of tools specifically for reconaissance

1. Recon toolbox - combines the tools together
2. Sublist3r (By Ahmed Aboul-Ela) returns a list of subdomains
3. recon_dom_cleanup - returns valid urls from a list of urls.
4. recon_dom_title - from each valid url return title of the page.
5. recon_dom_server - from each valid url, return the server header.

and more to come soon!

Version

• Version 1.3- Corrected several bugs, added centralised output folder, submodules = 1.0
• Version 1.2 - + recon_dom_server which returns the webserver of the subdomain.
• Version 1.1- recon_dom_cleanup which invalidates urls so that the result is current.
• Version 0.1 - had Sublist3r and recon_dom_title and returned all titles from all urls.

Usage

• Clone this repository
• cd recon_tools_101
• ./setup.sh for initial setup
• Run ./recon_toolbox.sh
• Enter domain to scan
• It will first call Sublist3r
• recon_dom_cleanup then checks for valid urls
• recon_dom_title will return title for valid urls.
• All results for this specific domain are stored in an output folder

Author

• Codarren Velvindron ([email protected])
• For questions and suggestions kindly send me a mail
• or open an issue

Donations

• Code is free and donations are always welcome.
• In case this tool helped you get a huge bounty, please consider sparing a dollar or two to support my work :)
• Paypal donation