reconFTW

reconFTW

reconFTW automates reconnaissance, outperforming subdomain enumeration with vulnerability checks to maximize target information. It employs passive, bruteforce, and permutation techniques for subdomain enumeration, ensuring comprehensive coverage.

Key features include:

• OSINT data gathering (domain information, email leaks, metadata).
• Subdomain enumeration (passive, bruteforce, permutations).
• Web probing and screenshotting.
• Vulnerability checks (XSS, Open Redirects, SSRF, SQLi).
• Integration with Axiom for distributed VPS and Faraday for web UI reporting.
• Customizable configuration file.

reconFTW is designed for bug bounty hunters, penetration testers, and security researchers seeking to automate and enhance their reconnaissance process.