magicRecon - MagicRecon is a powerful shell script to maximize

项目说明

<h1 align="center">
<br>
<a href=" src=" alt="magicrecon" style="width:100%"></a>
<br>
MagicRecon: Fast, simple and effective
<br>
</h1>

<p align="center">
<a href="
<img src="
</a>
<a href="
<img src="
</a>
<a href="
<img src="
</a>
<a href="
<img src="
</a>
<a href="
<img src="
</a>
<a href="">
<img src="
</a>
</p>

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common , all this saving the results obtained in an organized way in directories and with formats.

With Magic Recon you can perform passive and acti, analysis, subdomain scan and many more!

-------------------------------------

Main features :boom:

Save the results in an organized way in different formats.

Subdomain enumeration.

Check if the domains are alive.

Get whois information about every subdomain.

Get dns information about every subdomain.

Extract the technologies used in the domain.

Get information about the certificate used in the domain .

Take a screenshot on the domain.

Searches for emails on the domain, users and more things.

Enumerate public resources in AWS, Azure, and Google Cloud.

Search juicy information Dorks.

Check all entrys in robots.txt file.

Get all endpoints on the web.

Perform a parameter scan.

Perform a port scan to discover open ports.

Perform a dirsearch to find directories and files.

Check if is possible to bypass 403 HTTP status code.

Perform a massi and scan every X seconds.

Search missing security headers.

Check if the domain is to Email spoofing.

Check if the domain is to Subdomain takeover.

Check if the domain is to Cross-Origin Resource Sharing (CORS).

Check if different endpoints are to CSRF.

Look for entry points in the URL and check if it is to Open Redirect.

Look for entry points in the URL and check if it is to Cross-site scripting (XSS).

Look for entry points in the URL and check if it is to SQL Injection (SQLi).

Look for entry points in the URL and check if it is to Ser request forgery (SSRF).

Search all JS files in the domain and perform a scan for API Keys, access tokens, endpoints, etc.

Check if the domain use a CMS and scan it.

And many more...

-------------------------------------

Installation :hammer:

-------------------------------------

Configuration :wrench:

To configure MagicRecon tool you must open the configuration.cfg file and change defined by user data.

It is also important to correctly configure tools such as Subfinder and Notify to guarantee the correct functioning of magicRecon.

-------------------------------------

Usage :eyes:

TARGET OPTIONS

| Parameter | Description |
|------|-------------|
| -d | Target domain |
| -w | Wildcard domain |
| -l | Target list |

MODE OPTIONS

| Parameter | Description |
|------|-------------|
| -a, --all | All mode - Full scan with full target recognition and scanning |
| -p, --passive | Passi (Footprinting) - Performs only passi with multiple tools |
| -x, --active | Acti (Fingerprinting) - Performs only acti with multiple tools |
| -r, --recon | Reconnaissance - Perform active and passi |
| - | - Check multiple in the domain/list domains |
| -m, --massive | Massi - Massi analysis with repetitions every X seconds |

EXTRA OPTIONS

| Parameter | Description |
|------|-------------|
| -n, --notify | Notify - This option is used to recei ,
| -h, --help | Help - Show help |

-------------------------------------

Example Usage :speak_no_evil:

All:

Passi to a list of domains:

Acti to a domain:

Full reconnaissance:

Full reconnaissance and scanning:

Full reconnaissance and scanning to a wildcard:

Massi and scanning:

-------------------------------------

Sample video: passi :mo:

!Example image

-------------------------------------

To do :mage_man:

[x] Change tool operation to parameters.

[x] Improve the use of Notify.

[ ] Add new interesting tools to find more .

[ ] Sa in other formats.

[ ] Save the results in a document as a report.

[ ] Check if the emails found by the tool are leaked.

[x] Integrate RobotScraper.

-------------------------------------

Contribution & License :family:

You can contribute in following ways:

Report bugs & add issues.

Fix something and open a pull request.

Gi (Ideas) to make it better.

Spread the word.

*MagicRecon* is licensed under GPL-3.0 License

-------------------------------------

Special thanks

* Special Thanks to Mohd Shibli for his great contributions in the article Fasten your Recon process using Shell Scripting
* Special Thanks to for his great contributions in the repository KingOfBugBountyTips
*
*
*
*
*
*
-------------------------------------

Disclaimer

This tool is intended for educational and research purposes only. The author and contributors are not responsible for any misuse of this tool. Users are advised to use this tool responsibly and only on systems for which they ha permission. Unauthorized access to systems, networks, or data is illegal and unethical. Always obtain proper authorization before conducting any kind of acti that could impact other users or systems.

项目信息

开发语言：Shell

Star 数：1055

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。