Asalamu alaikum guys my name is Mr robot Ng hacker today I will going to show you how to install and use finalrecon automatic web reconnaissance tool
FinalRecon is an automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after another it can provide similar results keeping dependencies small and simple.
Tested on
Android userland
Ubuntu
Kali-Linux
Arch
Fedora
Manjaro
Features
FinalRecon provides detailed information such as :
Header Information
Whois
SSL Certificate Information
Crawler
html
CSS
Javascripts
Internal Links
External Links
Images
robots
sitemaps
Links inside Javascripts
Links from Wayback Machine from Last 1 Year
DNS Enumeration
A, AAAA, ANY, CNAME, MX, NS, SOA, TXT Records
DMARC Records
Subdomain Enumeration
Data Sources
BuffOver
crt.sh
ThreatCrowd
AnubisDB
ThreatMiner
Facebook Certificate Transparency API
Auth Token is Required for this source, read Configuration below
VirusTotal
API Key is Required
Shodan
API Key is Required
CertSpotter
Directory Searching
Support for File Extensions
Wayback Machine
URLs from Last 5 Years
Port Scan
Fast
Top 1000 Ports
Export
Formats
txt
json [Coming Soon]
Installation
<( Kali Linux )>
$ sudo apt install finalrecon
<(BlackArch Linux)>
$ sudo pacman -S finalrecon
<(Other Linux)>
$ git clone https://github.com/thewhiteh4t/FinalRecon.git
$ cd FinalRecon
$ pip3 install -r requirements.txt
<(Docker)>
$ docker pull thewhiteh4t/finalrecon
$ docker run -it --entrypoint /bin/sh thewhiteh4t/finalrecon
Also docker user can use this alias to run the finalrecon as the normal CLI user.
$ alias finalrecon="docker run -it --rm --name finalrecon --entrypoint 'python3' thewhiteh4t/finalrecon finalrecon.py"
Usage
help massage
$ python3 finalrecon.py -h
Check headers
$ python3 finalrecon.py --headers <url>
Check ssl Certificate
$ python3 finalrecon.py --sslinfo <url>
Check whois Information
$ python3 finalrecon.py --whois <url>
Crawl Target
$ python3 finalrecon.py --crawl <url>
Directory Searching
$ python3 finalrecon.py --dir <url> -e txt,php -w /path/to/wordlist
full scan
$ python3 finalrecon.py --full <url>
