# Rekono | Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically **URL:** \ **Category:** Tools & Scripts\ **Tags:** learning, tools, hacking, freebies\ **Created:** [September 3, 2022, 11:07pm UTC](https://onehack.st/t/rekono-execute-full-pentesting-processes-combining-multiple-hacking-tools-automatically/223424 "2022-09-03T23:07:55Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Post date:** [September 3, 2022, 11:07pm UTC](https://onehack.st/t/rekono-execute-full-pentesting-processes-combining-multiple-hacking-tools-automatically/223424/1 "2022-09-03T23:07:55Z")
[![](https://github.com/pablosnt/rekono/raw/main/rekono/frontend/public/static/logo-black.png)](https://github.com/pablosnt/rekono/blob/main/rekono/frontend/public/static/logo-black.png) # [![Unit testing](https://github.com/pablosnt/rekono/actions/workflows/unit-testing.yml/badge.svg) ](https://github.com/pablosnt/rekono/actions/workflows/unit-testing.yml)[![SCA](https://github.com/pablosnt/rekono/actions/workflows/security-sca.yml/badge.svg) ](https://github.com/pablosnt/rekono/actions/workflows/security-sca.yml)[![Secrets scanning](https://github.com/pablosnt/rekono/actions/workflows/security-secrets.yml/badge.svg) ](https://github.com/pablosnt/rekono/actions/workflows/security-secrets.yml)[![Code style](https://github.com/pablosnt/rekono/actions/workflows/code-style.yml/badge.svg)](https://github.com/pablosnt/rekono/actions/workflows/code-style.yml) **Rekono** combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in [Defect-Dojo](https://github.com/DefectDojo/django-DefectDojo) if an advanced vulnerability management is needed. Moreover, Rekono includes a Telegram bot that can be used to perform executions easily from anywhere and using any device. ## Features - Combine hacking tools to create pentesting `processes` - Execute pentesting `processes` - Execute pentesting `tools` - Review `findings` and receive them via `email` or `Telegram` notifications - Use `Defect-Dojo` integration to import the findings detected by Rekono - Execute `tools` and `processes` from `Telegram Bot` - `Wordlists` management ## Why Rekono? Do you ever think about the steps that you follow when start a pentesting? Probably you start performing some OSINT tasks to gather public information about the target. Then, maybe you run hosts discovery and ports enumeration tools. When you know what the target exposes, you can execute more specific tools for each service, to get more information and maybe, some vulnerabilities. And finally, if you find the needed information, you will look for a public exploit to get you into the target machine. I know, I know, this is an utopic scenario, and in the most cases the vulnerabilities are found due to the pentester skills and not by scanning tools. But before using your skills, how many time do you spend trying to get as information as possible with hacking tools? Probably, too much. Why not automate this process and focus on find vulnerabilities using your skills and the information that Rekono sends you? > The `Rekono` name comes from the Esperanto language where it means _recon_. ## Demo rekono.mp4 ### Telegram Bot rekono-bot.mp4 ### Supported tools - [theHarvester](https://github.com/laramies/theHarvester) - [EmailHarvester](https://github.com/maldevel/EmailHarvester) - [EmailFinder](https://github.com/Josue87/EmailFinder) - [Nmap](https://nmap.org/) - [Sslscan](https://github.com/rbsec/sslscan) - [SSLyze](https://nabla-c0d3.github.io/sslyze/documentation/) - [SSH Audit](https://github.com/jtesta/ssh-audit) - [SMBMap](https://github.com/ShawnDEvans/smbmap) - [Dirsearch](https://github.com/maurosoria/dirsearch) - [GitLeaks](https://github.com/zricethezav/gitleaks) & [GitDumper](https://github.com/internetwache/GitTools/tree/master/Dumper) - [Log4j Scanner](https://github.com/cisagov/log4j-scanner) - [CMSeeK](https://github.com/Tuhinshubhra/CMSeeK/) - [OWASP JoomScan](https://github.com/OWASP/joomscan) - [OWASP ZAP](https://www.zaproxy.org/) - [Nikto](https://github.com/sullo/nikto) - [SearchSploit](https://www.exploit-db.com/searchsploit) - [Metasploit](https://www.metasploit.com/) Thanks to all the contributors of these amazing tools! ## Installation ### Docker Execute the following commands in the root directory of the project: ```auto docker-compose build docker-compose up -d ``` If you need more than one tool running at the same time, you can set the number of executions-worker instances: ```auto docker-compose up -d --scale executions-worker=5 ``` Go to [https://127.0.0.1/](https://127.0.0.1/) > You can check the details in the [Docker](https://github.com/pablosnt/rekono/blob/main/docker/README.md) documentation. Specially, the [initial user](https://github.com/pablosnt/rekono/blob/main/docker/README.md#initial-rekono-user) documentation ### Using Rekono CLI If your system is Linux, you can use [rekono-cli](https://github.com/pablosnt/rekono-cli) to install Rekono in your system: ```auto pip3 install rekono-cli rekono install ``` After that, you can manage the Rekono services using the following commands: ```auto rekono services start rekono services stop rekono services restart ``` Go to [http://127.0.0.1:3000/](http://127.0.0.1:3000/) > ⚠ Only for Linux environments. > ⚠ Docker is advised. Only use that for local and personal usage. ### From Source Check the installation from source in [Rekono Wiki](https://github.com/pablosnt/rekono/wiki/4.-Installation#from-source) ## Configuration Check the configuration options in [Rekono Wiki](https://github.com/pablosnt/rekono/wiki/5.-Configuration) ## License Rekono is licensed under the [GNU GENERAL PUBLIC LICENSE Version 3](https://github.com/pablosnt/rekono/blob/main/LICENSE.md) ## Support If you need help you can create a new support [Issue](https://github.com/pablosnt/rekono-cli/issues/new?template=support.md) or mail [rekono.project@gmail.com](mailto:rekono.project@gmail.com) ## GitHub: [https://github.com/pablosnt/rekono](https://github.com/pablosnt/rekono)