HydraRecon

All In One, Fast, Easy Recon Tool

Features

• subdoamin enumeration
• check live domains
• simple port scanner
• take screenshot for domains
• crawler:
  • parse js files
  • parse robots.txt
  • parse sitemap.xml
  • collect archived urls

Requirements

you need to install chromedriver and add the bin file to PATH

installation

git clone https://github.com/aufzayed/HydraRecon.git

pip3 install -r requirements.txt

               __           
|__|   _| _ _ |__)_ _ _  _  
|  |\/(_|| (_|| \(-(_(_)| ) 
   /                       


usage: 

hydrarecon Methods:
	1.basic :: 
		- subdomain enumeration
		- scan common ports
		- screenshot hosts
		- html report
	2.crawl :: 
		- sitemap.xml
		- robots.txt
		- related urls: 

	3.config :: config hydra

examples:
	python3 hydrarecon.py --basic -d example.com
	python3 hydrarecon.py --crawl -d example.com
	python3 hydrarecon.py --config

optional arguments:
 -h, --help       show this help message and exit
 --basic          use basic recon module
 --crawl          use crawl module
 --config         initializing config file
 --session        Generate report from session.json file
 -d , --domain    domain to crawl or recon
 -p , --ports     ports to scan: (small | large | xlarge). default: small
 -T , --timeout   control http request timeout in seconds, default: 1s
 -t , --threads   number of threads, default: 10
 -o , --out       path to save report, default : home directory

Examples:

python3 hydrarecon.py --basic -d example.com = python3 hydrarecon.py --basic -d example.com -t 10 -T 1 -o ~ -p small
python3 hydrarecon.py --crawl -d example.com = python3 hydrarecon.py --crawl -d example.com -t 10 -o ~

Notes

• if you have virustoal API key use python3 hydrarecon.py --config (optional)
• --crawl option results depends on --basic results

Thanks

this tool inspired by:

• httprobe, waybackurls by @tomnomnom
• hakrawler by @hakluke
• aquatone by @michenriksen
• LinkFinder by @GerbenJavado
• subjs by @lc