KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agents #developer-tools #typescript #codex #cli #claude-code #mcp #rust #deepseek-harness #ai-agent

RECON-GHOST

★ 123 Open GitHub ↗

A powerful Bash-based automated reconnaissance toolkit for bug bounty hunters and penetration testers. Includes subdomain enumeration, port scanning, live host detection, fuzzing, and more. 🔍

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# RECON-GHOST

A powerful Bash-based automated reconnaissance toolkit for bug bounty hunters and penetration testers. Includes subdomain enumeration, port scanning, live host detection, fuzzing, and more. 🔍

# 🔍 RECON GHOST <img src="screenshot.png" width="50">

**Enterprise-Grade Reconnaissance Toolkit**  
> *Developed by FORTIS SECURITY*

📚 **Documentation**

For detailed installation guides and sample scan results, see the [docs/](/docs/) directory.

---

# 📸 ReconGhost

---

## ⚙️ *Features*

1. - 🛰️ Subdomain Enumeration (Amass + Subfinder)
2. - 🔍 Live Host Detection (httpx)
3. - 🔌 Port Scanning (Nmap)
4. - 📂 Web Path Fuzzing (FFuF)
5. - 👁️ Visual Recon (Aquatone)
6. - 🛡️ Vulnerability Scanning (Nuclei)

---

## 🔗 **Installation**

**Clone the repository**
```bash
git clone https://github.com/yourusername/RECON-GHOST.git
```

**Make scripts executable**
```bash
cd RECON-GHOST
chmod +x install.sh reconghost.sh
```

**Run the installer**
```bash
./install.sh  # Installs all tools automatically
```

**🛠 Usage**
```bash
./reconghost.sh -d example.com -o ./scan_results [-w wordlist.txt]
```

## ⚐  Command Flags

| Flag | Description          | Required |
|------|----------------------|----------|
| `-d` | Target domain        | Yes      |
| `-o` | Output directory     | Yes      |
| `-w` | Custom wordlist path | No       |
| `-h` | Show help            | No       |
| `-v` | Show version         | No       |

> ℹ️ Default wordlist is used if `-w` is not specified.

**🔇 Silence output:**
```bash
./reconghost.sh -d example.com -o ./scan_results [-w wordlist.txt] > /dev/null 2>&1
```

---

📂 **Output File Structure**

When the scan completes, the following directory structure is generated:

```
scan_results/
├── subdomains.txt
├── live_hosts.txt
├── ports.txt
├── fuzzing.txt
├── screenshots/
└── nuclei_results.txt
💡 This helps you organize recon data and import it into reporting tools easily.
```

### 📄 License
> This project is licensed under the MIT License.

### 🤝 Contribute
> Feel free to fork, star, and send PRs.
> Let’s build a powerful recon community together!

RECON-GHOST

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README