Trendshift - Ask AI

base on All In One Web Recon <img src="https://i.imgur.com/rLENhCp.jpg"> <img src="https://img.shields.io/badge/Python-3-brightgreen.svg?style=plastic"> <img src="https://img.shields.io/badge/All In One-red.svg?style=plastic"> <img src="https://img.shields.io/badge/Web Recon-red.svg?style=plastic"> <a href="https://twitter.com/thewhiteh4t">Twitter</a> - <a href="https://t.me/thewhiteh4t">Telegram</a> - <a href="https://thewhiteh4t.github.io">thewhiteh4t's Blog</a> FinalRecon is an all in one **automatic web reconnaissance** tool written in python. Goal of FinalRecon is to provide an **overview** of the target in a **short** amount of time while maintaining the **accuracy** of results. Instead of executing **several tools** one after another it can provide similar results keeping dependencies **small and simple**. ## Available In <a href="https://www.kali.org/news/kali-linux-2020-4-release/"> <img width="150px" hspace="10px" src="https://i.imgur.com/teSiL4p.png" alt="kali linux finalrecon"> </a> <a href="https://blackarch.org/"> <img width="150px" hspace="10px" src="https://i.imgur.com/YZ5KDL1.png" alt="blackarch finalrecon"> </a> <a href="https://secbsd.org/"> <img width="150px" hspace="10px" src="https://i.imgur.com/z36xL8c.png" alt="secbsd finalrecon"> </a> ## Featured On ### Python For OSINT * Hakin9 April 2020 * https://hakin9.org/product/python-for-osint-tooling/ ### NullByte * https://null-byte.wonderhowto.com/how-to/conduct-recon-web-target-with-python-tools-0198114/ * https://www.youtube.com/watch?v=F9lwzMPGIgo ### Hakin9 * https://hakin9.org/final-recon-osint-tool-for-all-in-one-web-reconnaissance/ ## Features FinalRecon provides detailed information such as : * Header Information * Whois * SSL Certificate Information * Crawler * html * CSS * Javascripts * Internal Links * External Links * Images * robots * sitemaps * Links inside Javascripts * Links from Wayback Machine from Last 1 Year * DNS Enumeration * Over 40 types of Records are queried * DMARC Records * Subdomain Enumeration * Over 10 reliable data sources * Directory Enumeration * Support for File Extensions * Wayback Machine * URLs from Last 5 Years * Port Scan * Fast * Top 1000 Ports * Export * Formats * txt * json [Coming Soon] ## Configuration ### API Keys Some Modules Use API Keys to fetch data from different resources, these are optional, if you are not using an API key, they will be simply skipped. #### Environment Variables Keys are read from environment variables if they are set otherwise they are loaded from the config directory ```bash FR_BEVIGIL_KEY, FR_BINEDGE_KEY, FR_FB_KEY, FR_HUNTER_KEY, FR_NETLAS_KEY, FR_SHODAN_KEY, FR_VT_KEY, FR_ZOOMEYE_KEY # Example : export FR_SHODAN_KEY="kl32lcdqwcdfv" ``` #### Saved Keys You can use **`-k`** to add the keys which will be saved in config directory automatically ```bash # Usage python3 finalrecon.py -k '<API NAME>@<API KEY>' Valid Keys : 'bevigil', 'binedge', 'facebook', 'hunter', 'netlas','shodan', 'virustotal', 'zoomeye' # Example : python3 finalrecon.py -k 'shodan@kl32lcdqwcdfv' ``` `Path = $HOME/.config/finalrecon/keys.json` | Source | Module | Link | |--------|--------|------| | Facebook | Sub Domain Enum | https://developers.facebook.com/docs/facebook-login/access-tokens | | VirusTotal | Sub Domain Enum | https://www.virustotal.com/gui/my-apikey | | Shodan | Sub Domain Enum | https://developer.shodan.io/api/requirements | | BeVigil | Sub Domain Enum | https://bevigil.com/osint-api | | BinaryEdge | Sub Domain Enum | https://app.binaryedge.io/ | | Netlas | Sub Domain Enum | https://docs.netlas.io/getting_started/ | | ZoomEye | Sub Domain Enum | https://www.zoomeye.hk/ | | Hunter | Sub Domain Enum | https://hunter.how/search-api | ### JSON Config File Default config file is available at `~/.config/finalrecon/config.json` ```json { "common": { "timeout": 30, "dns_servers": "8.8.8.8, 8.8.4.4, 1.1.1.1, 1.0.0.1" }, "ssl_cert": { "ssl_port": 443 }, "port_scan": { "threads": 50 }, "dir_enum": { "threads": 50, "redirect": false, "verify_ssl": false, "extension": "" }, "export": { "format": "txt" } } ``` ## Tested on * Kali Linux * BlackArch Linux > FinalRecon is a tool for **Pentesters** and it's designed for **Linux** based Operating Systems, other platforms like **Windows** and **Termux** are **NOT** supported. ## Installation ### Kali Linux ``` sudo apt install finalrecon ``` ### BlackArch Linux ``` sudo pacman -S finalrecon ``` ### SecBSD ```bash doas pkg_add finalrecon ``` ### Other Linux ```bash git clone https://github.com/thewhiteh4t/FinalRecon.git cd FinalRecon pip3 install -r requirements.txt ``` ### Docker ``` bash docker pull thewhiteh4t/finalrecon docker run -it --entrypoint /bin/sh thewhiteh4t/finalrecon ``` Also docker user can use this alias to run the finalrecon as the normal CLI user. ``` bash alias finalrecon="docker run -it --rm --name finalrecon --entrypoint 'python3' thewhiteh4t/finalrecon finalrecon.py" ``` And then use `finalrecon` to start your scan. > remark > > If you have any api keys you can easily commit that image in your local machine. > > This docker usage needs root to run docker command. ## Usage ```bash FinalRecon - All in One Web Recon | v1.1.6 options: -h, --help show this help message and exit --url URL Target URL --headers Header Information --sslinfo SSL Certificate Information --whois Whois Lookup --crawl Crawl Target --dns DNS Enumeration --sub Sub-Domain Enumeration --dir Directory Search --wayback Wayback URLs --ps Fast Port Scan --full Full Recon Extra Options: -nb Hide Banner -dt DT Number of threads for directory enum [ Default : 30 ] -pt PT Number of threads for port scan [ Default : 50 ] -T T Request Timeout [ Default : 30.0 ] -w W Path to Wordlist [ Default : wordlists/dirb_common.txt ] -r Allow Redirect [ Default : False ] -s Toggle SSL Verification [ Default : True ] -sp SP Specify SSL Port [ Default : 443 ] -d D Custom DNS Servers [ Default : 1.1.1.1 ] -e E File Extensions [ Example : txt, xml, php ] -o O Export Format [ Default : txt ] -cd CD Change export directory [ Default : ~/.local/share/finalrecon ] -k K Add API key [ Example : shodan@key ] ``` ```bash # Check headers python3 finalrecon.py --headers --url https://example.com # Check ssl Certificate python3 finalrecon.py --sslinfo --url https://example.com # Check whois Information python3 finalrecon.py --whois --url https://example.com # Crawl Target python3 finalrecon.py --crawl --url https://example.com # Directory Searching python3 finalrecon.py --dir --url https://example.com -e txt,php -w /path/to/wordlist # full scan python3 finalrecon.py --full --url https://example.com ``` ## Demo [![Odysee](https://i.imgur.com/IQpZ67e.png)](https://odysee.com/@thewhiteh4t:2/what%27s-new-in-finalrecon-v1.0.2-osint:c) ", Assign "at most 3 tags" to the expected json: {"id":"4973","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"

AI prompts

AI prompts