InstaRecon v0.1.1 - automated digital reconnaissance

Started by verg, July 02, 2015, 07:12:58 AM

Previous topic - Next topic

verg

Hi Backbox crew. I'd like to suggest my tool to be part of Backbox. It's called InstaRecon https://github.com/vergl4s/instarecon.

Its focus is to automate getting the 'low-hanging fruit' of recon. After gathering common DNS/Whois results, it queries Google to get subdomains and urls (using the 'site:*.<domain> -www.<domain> -etc.<domain>' dork), and it does DNS queries recursively on every new possible target found. It gets open ports and banners from Shodan as well, among other things.

Some, but not all, of the functionality overlap a little with dnsenum and recon-ng, however the idea of being a simple, non-modular script that gathers the most information with as little effort as possible makes it a very good option to start a reconnaissance with.

It's a breeze to install dependencies if you have pip (pip install -r requirements.txt), and it uses Python 2.7. Please give it a try, I think it can be very useful.

For latest .zip releases go to https://github.com/vergl4s/instarecon/releases.

ostendali

Thanks for letting us know about your tool.

It looks like we have already tools in the place which does similar work as you stated yourself as well.

However, we will consider and do the evaluation.

If all good we will integrate in the future release.

Thanks