reconFTW
Automated recon framework chaining subdomain enumeration, probing, and vulnerability checks.
Technical Architecture & Overview
reconFTW orchestrates dozens of recon tools into a single run against a target domain: subdomain enumeration, DNS and certificate analysis, web probing, directory fuzzing, port scanning, and vulnerability checks, with checkpoint-based scan resumption and Slack, Discord, or Telegram notifications. A configuration file lets operators enable or disable stages, and distributed scanning runs through the Ax Framework.
Targeted Technical Use Cases
One-command external attack surface collection for authorized assessments of a domain.
Evaluation & Trade-offs
Core Strengths
- +Chains established tools such as subfinder, httpx, nuclei, and nmap automatically.
- +Resumable and modular through its config.
- +Actively developed, with a Go rewrite available as a beta.
Trade-Offs & Limitations
- -Resource-hungry on large scopes.
- -Installation pulls in 80+ security tools and takes 15 to 45 minutes.
Defensive Security Application
External attack surface reviews that mirror what attackers enumerate first.
Frequently Asked Questions
What is reconFTW?→
reconFTW orchestrates dozens of recon tools into a single run against a target domain: subdomain enumeration, DNS and certificate analysis, web probing, directory fuzzing, port scanning, and vulnerability checks, with checkpoint-based scan resumption and Slack, Discord, or Telegram notifications. A configuration file lets operators enable or disable stages, and distributed scanning runs through the Ax Framework.
What is reconFTW used for?→
One-command external attack surface collection for authorized assessments of a domain.
What are the strengths of reconFTW?→
- +Chains established tools such as subfinder, httpx, nuclei, and nmap automatically.
- +Resumable and modular through its config.
- +Actively developed, with a Go rewrite available as a beta.
What are the limitations of reconFTW?→
- +Resource-hungry on large scopes.
- +Installation pulls in 80+ security tools and takes 15 to 45 minutes.
How is reconFTW used defensively?→
External attack surface reviews that mirror what attackers enumerate first.