# ReconNote | Web Application Security Automation Framework **URL:** \ **Category:** Tools & Scripts\ **Tags:** programming, hacking\ **Created:** [November 17, 2020, 1:22pm UTC](https://onehack.st/t/reconnote-web-application-security-automation-framework/162870 "2020-11-17T13:22:44Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Post date:** [November 17, 2020, 1:22pm UTC](https://onehack.st/t/reconnote-web-application-security-automation-framework/162870/1 "2020-11-17T13:22:44Z")
![image](https://onehack.st/uploads/default/original/3X/f/2/f28091fbf1cc299a33c796c7ab35c2dd1f630a00.png) ## Web Application Security Recon Automation Framework It takes user input as a domain name and maximize the attack surface area by listing the assets of the domain like - - Subdomains from - Amass ,findomain, subfinder & resolvable subdomains using shuffledns - Screenshots - Port Scan - JS files - Httpx Status codes of subdomains - Dirsearch file/dir paths by fuzzing # Installation 1 - Install Docker & docker-compose according to you OS from here - [https://docs.docker.com/get-docker/](https://docs.docker.com/get-docker/) 2 - git clone [https://github.com/0xdekster/ReconNote.git](https://github.com/0xdekster/ReconNote.git) 3 - Open docker-compose.yml & change the volumes directory path to the output folder example - volumes: - /root/reconnote/output/:/var/www/html 4 - Change the API\_HOST parameter value to your server/host ip or domain name. 5 - Run docker-compose build OR docker-compose build --no-cache 6 - Run docker-compose up -d 7 - Reconnote framework will be up at - {your-server}:3000 # Set Amass Config File to set API Keys 1- cd /ReconNote 2- docker exec -it reconnote\_dekster\_1 bash 3- cd /deksterrecon 4- nano amass-config.ini 5- Set your API keys and save, exit. # Usage 1 - Just enter domain/target name in Add Target & choose scan type 2 - Everything will be done by Reconnote and in few minutes you will get the Scan Results [![Image of reconnote](https://github.com/0xdekster/ReconNote/raw/master/reconnote3.png)](https://github.com/0xdekster/ReconNote/blob/master/reconnote3.png) # Scan Result [![Image of reconnote2](https://github.com/0xdekster/ReconNote/raw/master/reconnote4.png)](https://github.com/0xdekster/ReconNote/blob/master/reconnote4.png) # Demo Video [![IMAGE ALT TEXT HERE](https://camo.githubusercontent.com/d14454e6c09e8ab089facb43adec3c3410ddd36450d0e7b631af4fe55e1a7c49/68747470733a2f2f696d672e796f75747562652e636f6d2f76692f6a477067726555593448382f302e6a7067)](https://youtu.be/jGpgreUY4H8) # Contributions This is an open source project so contributins are welcome. You can request a PR for any changes that can enhance the ReconNote framework be it UI enhancement , tools adjustment ,features , etc.. # Acknowledgements ReconNote Security framework have been created by using the open source security tools made by amazing security community - 1- [Eduard Tolosa](https://github.com/Edu4rdSHL/findomain) 2- [Tomnomnom](https://github.com/tomnomnom) 3- [Michen riksen](https://github.com/michenriksen/aquatone) 4- [Project Discovery](https://github.com/projectdiscovery) 5- [Corben Leo](https://github.com/lc) ## GitHub: > **[GitHub - 0xdekster/ReconNote: Web Application Security Automation Framework...](https://github.com/0xdekster/ReconNote)** > > Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters