Your Bug Bounty Recon and Vulnerability Detection Made Simple

How it works • Setup • Usage • For Developers • Credits

---

Introducing MR.RECON, an advanced and versatile bug bounty recon and vulnerability detection tool powered by the efficiency of bash scripting. Designed with the needs of bug bounty hunters and security researchers in mind, this tool combines powerful reconnaissance techniques with automated vulnerability detection to supercharge your bug hunting efforts.

How it works ?

Enumeration -

1. Effective Subdomain Enumeration from Various Tools
2. Get URLs with open HTTP and HTTPS service
3. JS File Enumeration

Setup MR.RECON

MR.RECON requires different tools to run successfully. Run the following command to install the all requirments-

$ git clone git@github.com:techghoshal/mrecon.git
$ cd mrecon
$ sudo ./install.sh

You can also provie your own CONDIF file with your API Keys for subdomain enumeration with subfinder (/root/.config/subfinder/provider-config.yaml) and amass (amass_config.ini)

Easy to use

$ ./mrecon -h

$ ./mrecon -enum target.com

Modes

1. Enumuration Mode -

Subdomain and JS File Enumuration, Get URL, Find API Keys From JS File

$ ./mrecon -enum target.com

For Developers

If you have any queries, you can always contact me on twitter(@techghoshal)

Credits

I would like to express my gratitude to all of the open source projects that have made this tool possible and have made recon tasks easier to accomplish.