Web Application Reconnaissance Tool

A comprehensive security tool for performing reconnaissance on web applications. This tool helps identify potential security vulnerabilities by gathering information about a target web application in a non-intrusive manner.

Made by viphacker100(Aryan)

Features

• DNS Enumeration: Discovers all DNS records (A, AAAA, MX, NS, TXT, SOA, CNAME)
• Port Scanning: Checks for open web-related ports (80, 443, 8080, 8443, etc.)
• HTTP Headers Analysis:
  • Server information detection
  • Security headers examination
  • Missing security headers identification
  • Technology fingerprinting
• HTTP Methods Detection: Identifies allowed HTTP methods and warns about dangerous ones
• SSL/TLS Analysis:
  • Certificate expiration check
  • Protocol version identification
  • Cipher strength evaluation
  • Certificate chain validation
• Robots.txt & Sitemap Analysis: Extracts sensitive paths and site structure information
• Directory Discovery: Tests for common directories that might reveal sensitive information

Installation

1. Clone the repository:

   git clone https://github.com/viphacker-100/webrecon.git
   cd webrecon
   

2. Install the required dependencies:

   pip install -r requirements.txt
   

Usage

Basic usage:

python web_recon.py -u https://example.com

Advanced options:

python web_recon.py -u https://example.com -o results.json -t 10 --timeout 15 -v

Command-line Arguments

Argument	Description
-u, --url	Target URL (required)
-o, --output	Output file in JSON format
-t, --threads	Number of threads to use (default: 5)
--timeout	Request timeout in seconds (default: 10)
-v, --verbose	Enable verbose output

Output

The tool generates structured output with all reconnaissance findings. If an output file is specified, results are saved in JSON format for further analysis.

Example output structure:

{
  "target": "https://example.com",
  "domain": "example.com",
  "timestamp": "2025-05-06 14:30:00",
  "dns_info": { ... },
  "open_ports": [ ... ],
  "technologies": { ... },
  "headers": { ... },
  "methods": [ ... ],
  "ssl_info": { ... },
  "directories": [ ... ],
  "robots_sitemap": { ... }
}

Security and Ethical Use

This tool is designed for legitimate security testing with permission. Please ensure you have appropriate authorization before scanning any website or application. Unauthorized scanning may be illegal in many jurisdictions.

Disclaimer

This tool is provided for educational and legitimate security testing purposes only. The author is not responsible for any misuse or damage caused by this tool.

License

MIT License

Author

Made by viphacker100