Categories: Pentesting Tools

Reconator – Automated Recon for Pentesting & Bug Bounty

Reconator is a Framework for automating your process of reconnaissance without any Computing resource (Systemless Recon) at free of cost. It is designed to host on Heroku which is a free cloud hosting provider.

It performs the work of enumerations along with many vulnerability checks and obtains maximum information about the target domain.

It also performs various vulnerability checks like XSS, Open Redirects, SSRF, CRLF, LFI, SQLi, and much more. Along with these, it performs OSINT, fuzzing, Dorking, port scanning, and nuclei scanning on your target.

Reconator receives all the targets that need to be reckoned via a Web Interface and adds them into the Queue and Notifies via Telebot at the start and end of Recon on a target. So this is 100% automated and doesn’t require any manual interaction

Requirements

  • Heroku Free account (For Deploying)
  • Telegram account (For notifications)

Demo Video

Usage

WEB APPLICATION PATHS

pathDescription
(/) homeRoot page where you will add targets
/initialiseInitialize the Database and the cronjob
/queueThe targets added will be in the queue can manage targets
/scannedIt contains list of all scanned targets can view results by results
/issuesIt has a quick link for reporting a issue and tool improvement

Features

  • Systemless Recon 100% Free
  • Fast scan and Easy to use
  • Permanent storage of Results in DB
  • Notification support via Telegram bot
  • Fully Automated Scanner
  • Easy access via Web UI
  • Queue support allows adding many targets
  • Easy Deploy Easy Recon
  • Runs 24/7 for 22 Days [Heroku – 550 hrs/month free]
Febi

Recent Posts

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

4 days ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

4 days ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

5 days ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

1 week ago

ufw Command in Linux: Manage Firewall Rules with Examples

ufw (Uncomplicated Firewall) sits on top of iptables (or nftables on newer systems) and replaces…

1 week ago

who Command in Linux: Show All Logged-In Users and Sessions

When you share a server with a team or investigate unexpected activity, the first question…

1 week ago