Smartrecon

smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter

Generate Convert Improve

Install / Use

/learn @kh4sh3i/Smartrecon

About this skill

Quality Score

0/100

README

smartrecon

smartrecon is a script written in Bash, it is intended to automate some tedious tasks of reconnaissance and information gathering

Usage

sudo ./smartrecon.sh -d domain.com <option>
  option:
    -a | --alt   : Additionally permutate subdomains	
    -b | --brute : Basic directory bruteforce
    -f | --fuzz  : SSRF/XSS/Nuclei/CORS/prototype fuzzing	
    -s | --ssrf  : SSRF fuzzing	
    -x | --xss   : XSS fuzzing	  
    -n | --nuclei: Nuclei fuzzing	
    -c | --cors  : Cors fuzzing	  
    -p | --pp    : prototype pollution fuzzing

Main Features

Create a dated folder with recon notes
Grab subdomains using:
- subfinder, assetfinder, SonarSearch, cert.sh
- dnsgen , shuffledns , massdns
Find any CNAME records pointing to unused cloud services like aws
Probe for live hosts with shuffledns and fresh resolver
Web servers hunting [httpx] over top 50 ports
Grab a screenshots of responsive hosts with gowitness
Extract wayback import data
Perform naabu on specific ports
Perform dirsearch for all subdomains
find exposure data with nuclei scanner
find XSS, SSRF, cache poisoning vulnerability
send notifiaction wthi notify tools to discord,telegram,...
Generate a HTML report with output from the tools above

Installation & Requirements

git clone https://github.com/kh4sh3i/smartrecon.git
cd smartrecon
chmod +x install.sh
./install.sh

Tools

SonarSearch
subfinder
assetfinder
dnsgen
Fresh Resolvers
shuffledns
Massdns
goWitness
Waybackurls
httpx
gf
interestingEXT
feroxbuster
naabu
sqlmap-dev
Unfurl
nuclei
dalfox
ParamSpider
qsreplace
notify
Seclists collection
CorsMe
ppmap

Vulnerability

this is not only recon tools ! we automate find bug for your :D today we can find below bug :

XSS
SSRF
data exposure
Broken authentication
cache poisoning
subdomain takeover
Cors
prototype pollution

Tips

for send notification you should config ($HOME/.config/notify/provider-config.yaml) with discord webhook ulr.

System Requirements

Recommended to run on vps with 1VCPU and 2GB ram.

Contributing

If you want to contribute to a project and make it better, your help is very welcome.

product Roadmap

add open redirect scanner
add sql injection scanner
increase performance
fix some bugs

Thanks

Related Skills

node-connect

333.3k

Diagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps

frontend-design

82.0k

Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.

openai-whisper-api

333.3k

Transcribe audio via OpenAI Audio Transcriptions API (Whisper).

commit-push-pr

82.0k

Commit, push, and open a PR