FalconHunter - my active recon and vulnerability scanner framewor

项目说明

FalconHunter - Acti & Scanner

FalconHunter is a hands-on security tool built for pentesters and security researchers. It helps you dig into targets, find weaknesses, and get the data you need—fast.

Why Use This?

* Tool Integration: Le a wide array of tools like httpx, nuclei, dnsx, subfinder, and cname finder to automate the reconnaissance process.
* Logging Support: Includes a logging system to track scan progress and results, making debugging and auditing easier.
* : Optionally integrates with
* Modular & Customisable: Easily tweak which tools or modules to run, based on your recon scope or target type.

Get It Running

Option 1 — go install (Recommended)

If you have Go 1.22+ installed, grab the binary in one line:

This drops the falcon binary into $(go en)/bin. Make sure that directory is on your PATH:

Then run it:

Option 2 — Build from source

1. Grab the code:

2. Install dependencies (just run this):

3. Build the binary:

Updating

Once you're on a recent build, updating is one command — it checks GitHub directly and self-updates from any directory:

It compares the commit baked into your binary against the latest on main. If you're behind, it pulls and rebuilds in place (inside a clone) or go installs the newest commit straight from GitHub.

Coming from an older (one-time manual reinstall)

Older binaries don't have -up, so do this once:

1. Remove the old binary (check every location first):

2. Install the latest — tip of main, no module-proxy lag:

*(or clone + build: git clone && cd FalconHunter && go build -o ~/go/bin/falcon ./cmd/falcon/)*

3. Install the JS-analysis dependencies the new uses:

4. :

After that, every future update is just falcon -up.

Notification Setup (

FalconHunter can send real-time alerts , Discord, and Slack. Credentials are read from en first, then from config.yaml as a fallback.

Option A — En (Recommended)

Keeps secrets off disk and out of control.

For the current terminal session only (lost when you close the terminal):

To make them permanent (survi and new terminal sessions):

1. Open your shell config file:

2. Add these lines at the bottom:

3. Save and apply the changes:

4. they are set:

Option B — config.yaml (Fine for local/private use)

Edit config.yaml directly:

> Do not commit real tokens to git. If you use Option B, add config.yaml to your .gitignore or keep the empty and use env vars instead.

How to get your

Step 1 — Create a bot and get the token
1. Open
2. Send /newbot
3. Give your bot a name (e.g. FalconHunter Alerts)
4. Give your bot a username ending in bot (e.g. falconhunter_bot)
5. BotFather replies with your token — looks like 7123456789:AAFxxx...
6. Copy that — that is your TELEGRAM_TOKEN

Step 2 — Get your chat ID
1. Search for your new bot in Start (or send it any message)
2. Open this URL in your browser (replace <YOUR_TOKEN> with the token from Step 1):

3. Look for "chat":{"id": in the JSON response — the number after it is your TELEGRAM_CHAT_ID
4. Example response:

So TELEGRAM_CHAT_ID would be 123456789

Step 3 — Test it works

Run this in your terminal (replace the placeholders):

If you get a JSON response with "ok":true, it's working.

---

How to Use It

Basic scan:

Need help? Run:

Contribute

Found a bug? Got a killer feature idea?

License

MIT License - Do what you want, just don't blame us.

项目信息

开发语言：Python

Star 数：12

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕my active recon and vulnerability scanner framework 展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。