A fast and simple Python script for web reconnaissance that follows a modular structure and provides detailed information on various areas.
sudo apt install finalrecon (420 KB)
Dependências: python3, python3-aiodns, python3-aiohttp, python3-bs4, python3-cryptography, python3-dnspython, python3-lxml, python3-requests, python3-tldextract
Escolha um comando ao lado para ver a descrição e a ajuda completa.
finalrecon
root@kali:~# finalrecon -h
usage: finalrecon [-h] [--url URL] [--headers] [--sslinfo] [--whois] [--crawl]
[--dns] [--sub] [--dir] [--wayback] [--ps] [--full] [-nb]
[-dt DT] [-pt PT] [-T T] [-w W] [-r] [-s] [-sp SP] [-d D]
[-e E] [-o O] [-cd CD] [-of OF] [-k K]
FinalRecon - All in One Web Recon | v1.1.8
options:
-h, --help show this help message and exit
--url URL Target URL
--headers Header Information
--sslinfo SSL Certificate Information
--whois Whois Lookup
--crawl Crawl Target
--dns DNS Enumeration
--sub Sub-Domain Enumeration
--dir Directory Search
--wayback Wayback URLs
--ps Fast Port Scan
--full Full Recon
Extra Options:
-nb Hide Banner
-dt DT Number of threads for directory enum [ Default : 30 ]
-pt PT Number of threads for port scan [ Default : 50 ]
-T T Request Timeout [ Default : 30.0 ]
-w W Path to Wordlist [ Default : wordlists/dirb_common.txt ]
-r Allow Redirect [ Default : False ]
-s Toggle SSL Verification [ Default : True ]
-sp SP Specify SSL Port [ Default : 443 ]
-d D Custom DNS Servers [ Default : 1.1.1.1 ]
-e E File Extensions [ Example : txt, xml, php ]
-o O Export Format [ Default : txt ]
-cd CD Change export directory [ Default : ~/.local/share/finalrecon ]
-of OF Change export folder name [ Default :<path>fr_<hostname>_<date>
]
-k K Add API key [ Example : shodan@key ]