Skip to content

SkillDevloper/Reco-Nova

Folders and files

NameName
Last commit message
Last commit date

Latest commit

ย 

History

6 Commits
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 
ย 

Repository files navigation

Reco-Nova - Recon Automation Framework

 โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—       โ–ˆโ–ˆโ–ˆโ•—   โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—   โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— 
 โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•—      โ–ˆโ–ˆโ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—
 โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘
 โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•  โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘โ•šโ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘
 โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•      โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘
 โ•šโ•โ•  โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ•       โ•šโ•โ•  โ•šโ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ•   โ•šโ•โ•โ•โ•  โ•šโ•โ•  โ•šโ•โ•

โš ๏ธ Project Status: Prototype (v1.1)

This project is currently in version 1.1 and is considered a prototype.

There may be bugs, errors, or incomplete features present in this version. Please make sure to verify and test everything carefully before using it in any production environment.

๐Ÿšง Note: Development is in progress for version v1.2

Sample_Video.mp4

A powerful Linux-based command-line reconnaissance tool designed to automate key phases of bug bounty and penetration testing reconnaissance. Professional Edition with enhanced UI and automatic dependency management.

โœจ Key Features

  • ๐Ÿ” Wayback URL Collection: Gather historical URLs from archive services
  • ๐Ÿ“Š Parameter Extraction: Extract HTTP query parameters from URLs
  • ๐ŸŒ Subdomain Enumeration: Discover subdomains using multiple tools
  • ๐Ÿ’ก Live Host Detection: Identify active web hosts
  • โšก JavaScript Analysis: Extract endpoints from JavaScript files
  • ๐Ÿ”’ Sensitive File Detection: Scan for exposed sensitive files
  • ๐Ÿ“ธ Screenshot Capture: Capture screenshots of web assets
  • ๐ŸŽจ Professional CLI Interface: Beautiful, colorful, and interactive
  • ๐Ÿ”„ Automatic Dependency Management: Auto-install and update dependencies
  • ๐Ÿ›ก๏ธ Python 3.12+ Compatible: Latest Python version support
  • ๐Ÿ“ฆ Modular Architecture: Easy to extend and customize

๐Ÿš€ Installation

Prerequisites

  • Python 3.12+ (required)
  • Linux operating system (Kali, Ubuntu, Debian recommended)

โšก Quick Start (Recommended)

No manual installation needed! Reco-Nova automatically checks and installs dependencies:

# Clone the repository
git clone https://github.com/SkillDevloper/Reco-Nova.git
cd reco-nova

# Run any command - dependencies auto-install!
python reco-nova.py --help

๐Ÿ”ง Manual Installation

If you prefer manual setup:

# Install Python dependencies
pip install -r requirements.txt

# Check dependencies
python reco-nova.py --check-deps

๐Ÿ› ๏ธ External Tools (Optional but Recommended)

Enhanced functionality with these tools:

# Install Go tools
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install github.com/tomnomnom/assetfinder@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/sensepost/gowitness@latest

# Add Go tools to PATH
export PATH=$PATH:~/go/bin
echo 'export PATH=$PATH:~/go/bin' >> ~/.bashrc

๐ŸŽฎ Usage

๐ŸŽฏ Interactive Mode (Recommended)

Experience the beautiful professional interface:

python reco-nova.py -i

Features:

  • ๐ŸŽจ Colorful menu system
  • ๐Ÿ“Š Real-time progress feedback
  • ๐Ÿ” Interactive domain input
  • โœจ Professional animations
  • ๐Ÿ›ก๏ธ Error handling with prompts

โšก Command Line Mode

Basic Usage

python reco-nova.py -d example.com

Run Full Reconnaissance

python reco-nova.py -d example.com --full

Individual Modules

# Collect Wayback URLs
python reco-nova.py -d example.com --wayback

# Extract Parameters
python reco-nova.py -d example.com --params

# Discover Subdomains
python reco-nova.py -d example.com --subs

# Detect Live Hosts
python reco-nova.py -d example.com --live

# Analyze JavaScript
python reco-nova.py -d example.com --js

# Scan Sensitive Files
python reco-nova.py -d example.com --sensitive

# Capture Screenshots
python reco-nova.py -d example.com --shots

Output Options

# Run without saving files (memory only) - Individual modules show results on screen
python reco-nova.py -d example.com --wayback --no-save
python reco-nova.py -d example.com --params --no-save

# Full reconnaissance always saves output (comprehensive reporting)
python reco-nova.py -d example.com --full --no-save  # Note: Will still save output

# Generate reports only (no individual files)
python reco-nova.py -d example.com --full --reports-only

# Basic usage (no specific module) - shows results on screen if --no-save used
python reco-nova.py -d example.com --no-save

Help Commands

# Show help
python reco-nova.py -h
python reco-nova.py --help

# Check dependencies
python reco-nova.py --check-deps

๐Ÿ“ Output Structure

The tool generates organized output in the output/ directory:

output/
โ”œโ”€โ”€ urls.txt              # Collected URLs
โ”œโ”€โ”€ parameters.txt        # Extracted parameters
โ”œโ”€โ”€ subdomains.txt        # Discovered subdomains
โ”œโ”€โ”€ live_hosts.txt        # Active hosts
โ”œโ”€โ”€ javascript_files.txt  # JavaScript files found
โ”œโ”€โ”€ js_endpoints.txt      # Endpoints from JS
โ”œโ”€โ”€ sensitive_files.txt    # Sensitive files found
โ”œโ”€โ”€ api_endpoints.txt     # API endpoints
โ”œโ”€โ”€ screenshots/          # Captured screenshots
โ””โ”€โ”€ reports/              # Professional reports
    โ”œโ”€โ”€ report_domain.com.json  # JSON report
    โ””โ”€โ”€ report_domain.com.html  # HTML report (with CSS)

๐Ÿ“Š Professional Reports

Reco-Nova automatically generates both JSON and HTML reports with comprehensive scan results:

๐ŸŽจ HTML Report Features

  • ๐ŸŒˆ Beautiful Design: Modern, responsive interface with gradients
  • ๐Ÿ“ฑ Mobile Friendly: Works on all devices and screen sizes
  • ๐Ÿ” Interactive Elements: Hover effects and animations
  • ๐Ÿ“Š Visual Summary: Color-coded statistics and metrics
  • โš ๏ธ Risk Highlighting: Sensitive files marked in red
  • ๐ŸŽฏ Professional Layout: Enterprise-ready presentation

๐Ÿ“‹ Report Contents

  • Scan Summary: Count of each data type discovered
  • Detailed Results: Complete lists of all findings
  • Timestamp: When the scan was performed
  • Domain Information: Target domain details
  • Risk Assessment: Highlighted sensitive findings

๐Ÿ“„ Report Access

# Reports are automatically generated in:
output/reports/report_<domain>.html
output/reports/report_<domain>.json

# Open HTML report in browser:
# Double-click the .html file or use:
firefox output/reports/report_<domain>.html

๐Ÿ“‹ Output Behavior

๐ŸŽฏ Smart Output Management

Reco-Nova provides intelligent output management based on the type of reconnaissance:

๐Ÿ“Š Individual Modules - Screen Display

When using --no-save with individual modules, results are displayed on screen:

$ python reco-nova.py -d example.com --wayback --no-save

[*] Output saving: DISABLED
[*] Starting Wayback URL Collection...
[!] Output saving is disabled. Results will not be saved to files.

============================================================
[*] URLs Results (25 found)
============================================================
[ 1] https://example.com/login
[ 2] https://example.com/admin
[ 3] https://example.com/api/user
...
Total urls: 25
============================================================

๐Ÿ”„ Full Reconnaissance - Always Saves

Full reconnaissance always saves output for comprehensive reporting:

$ python reco-nova.py -d example.com --full --no-save

[!] Note: Full reconnaissance always saves output for comprehensive reporting
[*] Output saving: ENABLED
[+] Saved 25 URLs to output/urls.txt
[+] Saved 8 parameters to output/parameters.txt
...
[+] Generated HTML report: output/reports/report_example.com.html

๏ฟฝ Basic Usage - Smart Display

Basic usage (no specific module) shows results on screen when --no-save is used:

$ python reco-nova.py -d example.com --no-save

[*] Output saving: DISABLED
[*] Starting Basic Reconnaissance...
[+] Collected 25 URLs (displayed on screen)
[+] Extracted 8 parameters (displayed on screen)
...

๐Ÿ“ฑ Interactive Mode - User Choice

Interactive mode asks users about saving output per operation:

> Save output to files? (Y/n): n
[*] Output saving: DISABLED
# Results displayed on screen

๐ŸŽจ Screen Display Features

  • ๐Ÿ“Š Formatted Results: Numbered lists with clear formatting
  • ๐ŸŽฏ First 20 Items: Shows initial results, then summary
  • ๐Ÿ“ˆ Total Count: Clear summary of findings
  • ๐ŸŒˆ Color-Coded: Professional visual presentation
  • โš ๏ธ Empty Results: Clear message when no items found

Visual Design

  • ๐ŸŒˆ Color-Coded Output: Different colors for different message types
  • ๐Ÿ“Š Professional ASCII Art: Beautiful banners and headers
  • ๐ŸŽฏ Interactive Menus: User-friendly selection system
  • โœจ Progress Indicators: Real-time operation feedback

User Experience

  • ๐Ÿ”„ Auto-Dependency Management: No manual setup required
  • ๐Ÿ›ก๏ธ Error Handling: Graceful error recovery with helpful messages
  • ๐Ÿ“ Clear Logging: Structured logs with timestamps
  • ๐ŸŽฎ Intuitive Navigation: Easy-to-use interactive mode

Cross-Platform Compatibility

  • ๐Ÿ’ป Windows Support: Full compatibility with Windows terminals
  • ๐Ÿง Linux Optimized: Best performance on Linux systems
  • โšก Fast Startup: Quick dependency checking and loading

Module Descriptions

Wayback URL Collection

Collects historical URLs from the Wayback Machine API and filters for relevant web endpoints.

Parameter Extraction

Analyzes collected URLs to extract unique HTTP query parameters for testing.

Subdomain Enumeration

Uses multiple tools (subfinder, assetfinder) to discover subdomains related to the target domain.

Live Host Detection

Checks discovered subdomains to identify which hosts are actively responding.

JavaScript Analysis

  • Discovers JavaScript files from URLs and live hosts
  • Extracts API endpoints and hidden paths from JavaScript code
  • Identifies potential attack surfaces

Sensitive File Detection

Scans live hosts for commonly exposed sensitive files like configuration files, backups, and credentials.

Screenshot Capture

Takes screenshots of live web assets for visual reconnaissance and documentation.

๐Ÿ“ธ Examples

Full Reconnaissance Example

Interface1

Interactive Mode Example

Interface1

๐Ÿ“ Logging & Troubleshooting

Automatic Logging

Logs are automatically generated in the logs/ directory with timestamps for debugging and audit purposes:

logs/
โ”œโ”€โ”€ recon_20260310_123456.log    # Timestamped session logs
โ””โ”€โ”€ recon_20260310_234567.log    # Multiple session support

Common Issues & Solutions

๐Ÿ”ง Dependency Issues

# Check if dependencies are properly installed
python reco-nova.py --check-deps

# Manual installation if auto-install fails
pip install -r requirements.txt

๐Ÿ Python Version Issues

# Check Python version (requires 3.12+)
python --version

# Upgrade Python if needed
# On Ubuntu/Debian:
sudo apt update && sudo apt install python3.12

# On Kali Linux:
sudo apt update && sudo apt install python3.12

๐Ÿ› ๏ธ External Tool Issues

# Check if Go is installed
go version

# Install Go if missing
# On Ubuntu/Debian:
sudo apt install golang-go

# On Kali Linux:
sudo apt install golang-go

๐Ÿ–ฅ๏ธ Windows Compatibility

  • Use PowerShell or Command Prompt
  • Ensure Python is in PATH
  • Run as Administrator if needed

๐Ÿ” Debug Mode

For detailed debugging, check the log files:

# View latest log
tail -f logs/recon_$(date +%Y%m%d)_*.log

# Or check all logs
ls -la logs/

Security and Ethics

  • Only scan domains you have permission to test
  • Focus on passive reconnaissance techniques
  • Respect robots.txt and rate limits
  • Use responsibly and ethically

๐Ÿ“‹ Changelog

Version 1.2 - Professional Edition

  • โœจ New Professional CLI Interface - Beautiful, colorful, and interactive
  • ๐Ÿ”„ Automatic Dependency Management - Auto-install and update dependencies
  • ๐Ÿ›ก๏ธ Python 3.12+ Support - Latest Python version compatibility
  • ๐ŸŽจ Enhanced Visual Design - Professional ASCII art and color schemes
  • ๐Ÿ“ Improved Error Handling - Graceful error recovery
  • ๐Ÿ” Better Logging System - Structured logs with timestamps
  • โšก Performance Optimizations - Faster startup and execution

๐Ÿ“„ License

This project is licensed under the MIT License - see the LICENSE file for details.

๐Ÿ‘จโ€๐Ÿ’ป Developer

Developed by Daniyal Shahid


โš ๏ธ Disclaimer

This tool is intended for authorized security testing only. Users are responsible for ensuring they have proper authorization before scanning any targets. The developers are not responsible for misuse of this tool.

๐Ÿ›ก๏ธ Ethical Usage Guidelines

  • โœ… Only scan domains you own or have explicit permission to test
  • โœ… Focus on passive reconnaissance techniques
  • โœ… Respect robots.txt and rate limits
  • โœ… Use responsibly and ethically
  • โŒ Do not use for malicious purposes
  • โŒ Do not scan targets without authorization

๐ŸŽฏ Thank you for using Reco-Nova - Professional Reconnaissance Automation!

About

A powerful Linux-based command-line reconnaissance tool designed to automate key phases of bug bounty and penetration testing reconnaissance. Professional Edition with enhanced UI and automatic dependency management.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages