r3conwhal3

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

★ 14 Open GitHub ↗

r3conwhale aims to develop a multifunctional recon chain for web applications, intelligently interpreting collected data, and optimizing performance and resource consumption through a concurrency-based approach.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<div align="center">
  <h1>r3conwhal3</h1>
</div>

<p align="center">
  <a href="#installation">Installation</a> •
  <a href="#usage">Usage</a> •
  <a href="#features">Features</a> •
  <a href="#disclaimer">Disclaimer</a> •
</p>

`r3conwhale` aims to develop a multifunctional recon chain for web applications, intelligently interpreting collected data, and optimizing performance and resource consumption through a concurrency-based approach.

## 💿 Installation

### UNIX/WSL

- `r3conwhal3` requires go >= 1.21.1+ to install and paths correctly set ($GOPATH, $GOROOT).

Run the following command to get the repo:

```
go install -v github.com/LiterallyEthical/r3conwhal3/cmd/r3conwhal3@latest
```

Run the following command to install dependencies

```
wget "https://raw.githubusercontent.com/LiterallyEthical/r3conwhal3/main/installer.sh"
chmod +x installer.sh
./installer.sh
```

```
git clone https://github.com/LiterallyEthical/r3conwhal3
cd r3conwhal3/
chmod +x installer.sh
./installer.sh
```

### Docker Image 🐳

- Pull the image

```
docker pull literallyethical/r3conwhal3
```

- Run the container

```
docker run -it -v </path/to/folder>:/app/results -p 8080:8080 --rm literallyethical/r3conwhal3 run -d <target-domain>  -o /app/results
```

- Specify the **OutputFolder** to saving results for later and choose a **target domain** to enumerate. For detail information, please refer to the [Docker](https://hub.docker.com/r/literallyethical/r3conwhal3) documentation.

</div>

## ⚙️ Config file

- Download and configure CFG file

```
wget https://raw.githubusercontent.com/LiterallyEthical/r3conwhal3/main/cmd/r3conwhal3/docs/config.env
```

- The **config.env** file enables control over the entire execution of the automation chain.
- You can find the default configuration file on [here](https://github.com/LiterallyEthical/r3conwhal3/blob/main/cmd/r3conwhal3/docs/config.env).
- It is possible to set various scanning modes, tool options, personalized wordlists etc. You can find the detailed config options on [wiki](https://github.com/LiterallyEthical/r3conwhal3/wiki/0x02%E2%80%90Configuration-File).

## Usage

```
r3conwhal3 [run] [galery] options
```

### Options

|                                                   :exclamation: **Disclaimer**                                                    |
| :-------------------------------------------------------------------------------------------------------------------------------: |
| See the [**wiki**](https://github.com/LiterallyEthical/r3conwhal3/wiki) for running the **r3conwhal3** with custom configuration. |

</div>

### Example Usage

#### Running the scan with default options

```
r3conwhal3 run -d <domain-name>
```

#### Running the scan with custom options

```
r3conwhal3 run  -d <domain> [-c <path-to-config-dir>] [-outDir <path-to-out-dir>]
```

|                                                             :exclamation: **Disclaimer**                                                              |
| :---------------------------------------------------------------------------------------------------------------------------------------------------: |
| It is possible to see more running examples for **r3conwhal3** on [**wiki**](https://github.com/LiterallyEthical/r3conwhal3/wiki/0x01%E2%80%90Usage). |

</div>

## Features

### <div style="position: relative; display: flex; align-items: flex-end;"><img src="assets/images/inspector_gadget.ico" alt="Your Icon" width="60" height="60"> Passive Subdomain Enumeration

| ID  | Tool                                                                      | Role                                                  |
| :-: | :------------------------------------------------------------------------ | :---------------------------------------------------- |
|  1  | [subfinder](https://github.com/projectdiscovery/subfinder)                | discovering subdomains                                |
|  2  | [assetfinder](https://github.com/tomnomnom/assetfinder)                   | discovering more subdomains                           |
|  3  | [amass](https://github.com/owasp-amass/amass)                             | discovering more subdomains                           |
|  4  | [subkill3r](https://github.com/LiterallyEthical/r3conwhal3/pkg/subkill3r) | discovering more subdomains (still under development) |

### Active Subdomain Enumeration

| ID  | Tool                                           | Role                                 |
| :-: | :--------------------------------------------- | :----------------------------------- |
|  1  | [puredns](https://github.com/d3mondev/puredns) | subdomain resolving and bruteforcing |
|  2  | [gotator](https://github.com/Josue87/gotator)  | DNS permutations                     |

### Web Operations

| ID  | Tool                                                           | Role                                                |
| :-: | :------------------------------------------------------------- | :-------------------------------------------------- |
|  1  | [httpx](https://github.com/projectdiscovery/httpx/tree/v1.3.7) | filtering live domains from the gathered subdomains |
|  2  | [gowitness](https://github.com/sensepost/gowitness)            | taking screenshots of filtered live domains         |
|  3  | [ffuf](https://github.com/ffuf/ffuf)                           | directory discovery & fuzzing                       |

### Vulnerability Scanning

| ID  | Tool                                         | Role                                     |
| :-: | :------------------------------------------- | :--------------------------------------- |
|  1  | [subzy](https://github.com/PentestPad/subzy) | subdomain takeover vulnerability checker |

## Disclaimer

Usage of this program for attacking targets without consent is illegal. It is the user's responsibility to obey all applicable laws. The developer assumes no liability and is not responsible for any misuse or damage caused by this program. Please use responsibly.

r3conwhal3

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README