Web Recon

All-in-one web security scanner for pentesting, bug bounty, and security audits.

Scan any target with a single command and get a structured report with findings prioritized by severity. Modular — run the full suite or pick individual steps.

Why Use This

• One command → full security assessment with prioritized findings
• 12 scan modules — DNS, ports, fingerprinting, subdomains, directories, secrets, vulnerabilities, headers, CORS, SSL, WordPress, Nuclei templates
• Security header scoring — instant letter-grade for any site's HTTP security posture
• Secrets detection — 459 rules covering AWS, GCP, GitHub, Slack, databases, and more
• Skips missing tools gracefully — works with whatever you have installed
• Resume mode — pick up where a crashed scan left off
• JSON + Markdown reports — machine-readable and human-readable output

Quick Start