reconFTW is a reconnaissance automation tool that orchestrates multiple security scanning utilities to identify vulnerabilities and assets on target domains.
The tool addresses the challenge of running disparate reconnaissance tools in a coordinated workflow by bundling best-of-breed utilities for subdomain enumeration, DNS reconnaissance, OSINT gathering, and vulnerability scanning. It chains together specialized tools and presents results in a unified manner, eliminating the need to manually invoke each scanner separately or integrate their outputs by hand.
Penetration testers and bug bounty hunters should adopt this tool when they need to perform comprehensive reconnaissance on domains without manually orchestrating multiple tools. It suits engagements where speed and coverage matter more than deep customization of individual scanning phases. The tool runs on Linux and macOS and can be deployed via Docker, Terraform, or Ansible for infrastructure-as-code workflows. The README does not compare it to alternative reconnaissance frameworks.
The project maintains active issue resolution and operates a community Discord and Telegram channel for user support. Development includes infrastructure-as-code provisioning options through Terraform and Ansible, indicating investment in deployment flexibility. The codebase spans multiple languages including Bash, Go, and Python, suggesting a modular architecture where different scanning phases may be implemented in the most appropriate language for each task. Continuous integration via GitHub Actions is configured, showing automated testing practices.
