reconFTW
reconFTW automates reconnaissance, outperforming subdomain enumeration with vulnerability checks to maximize target information. It employs passive, bruteforce, and permutation techniques for subdomain enumeration, ensuring comprehensive coverage.
Key features include:
- OSINT data gathering (domain information, email leaks, metadata).
- Subdomain enumeration (passive, bruteforce, permutations).
- Web probing and screenshotting.
- Vulnerability checks (XSS, Open Redirects, SSRF, SQLi).
- Integration with Axiom for distributed VPS and Faraday for web UI reporting.
- Customizable configuration file.
reconFTW is designed for bug bounty hunters, penetration testers, and security researchers seeking to automate and enhance their reconnaissance process.