rec0n — Automated Subdomain & Sensitive Data Recon Tool ⚡

⚡ A fully automated subdomain reconnaissance and sensitive data discovery toolkit.

🛠 Features

• 🔎 Subdomain enumeration (subfinder, crt.sh)
• 🌐 Live host detection with httpx
• 🔥 Vulnerability scanning (CORS) using nuclei
• 🧾 Historical data collection from archive.org
• 🕵️‍♂️ Sensitive file discovery (.sql, .xml, .zip, etc.)
• 🚨 Live sensitive file validation
• 🎨 Clean, colored CLI output for easy reading
• 📁 Organized output directory per scan

📦 Requirements

Install the following tools before using rec0n:

• subfinder

• httpx

• nuclei

• anew

• uro

• jq

• Python 3.7+

• Install required Python modules:

pip3 install -r requirements.txt

❤️ Credits Inspired by tools from:

• ProjectDiscovery
• TomNomNom
• s0md3v
• The Bug Bounty community