thewhiteh4t / finalrecon

All In One Web Recon

  ___   _      ___   _      ___   _      ___   _      ___   _
 [(_)] |=|    [(_)] |=|    [(_)] |=|    [(_)] |=|    [(_)] |=|
  '-`  |_|     '-`  |_|     '-`  |_|     '-`  |_|     '-`  |_|
 /mmm/  /     /mmm/  /     /mmm/  /     /mmm/  /     /mmm/  /
       |____________|____________|____________|____________|
                             |            |            |
                         ___  \_      ___  \_      ___  \_
                        [(_)] |=|    [(_)] |=|    [(_)] |=|
                         '-`  |_|     '-`  |_|     '-`  |_|
                        /mmm/        /mmm/        /mmm/

┌──┤ WHOAMI ├─────────▰▰▰
│
├─▣ VAPT
├─▣ Author of seeker and finalrecon
├─▣ thewhiteh4t's Blog
├─▣ I am mostly available at The White Circle
│
└───────────────────────────────▰▰▰

┌──┤ SOCIAL ├─────────▰▰▰
│
├─◈ 𝕏
├─◈ YouTube
├─◈ Telegram
├─◈ LinkedIn
│
└───────────────────────────────▰▰▰

┌──┤ PROJECTS ├───────▰▰▰
│
├─◈ Seeker
├─◈ FinalRecon
├─◈ NExfil
├─◈ pwnedOrNot
├─◈ KillCast
├─◈ FlashSploit
│
└───────────────────────────────▰▰▰

finalrecon's Issues

Anyone can fix this?

ERROR: Command errored out with exit status 1:
command: /usr/bin/python3 -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-install-f_9re_78/psycopg2/setup.py'"'"'; file='"'"'/tmp/pip-install-f_9re_78/psycopg2/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(file);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, file, '"'"'exec'"'"'))' egg_info --egg-base /tmp/pip-pip-egg-info-faxuxsh9
cwd: /tmp/pip-install-f_9re_78/psycopg2/
Complete output (23 lines):
running egg_info
creating /tmp/pip-pip-egg-info-faxuxsh9/psycopg2.egg-info
writing /tmp/pip-pip-egg-info-faxuxsh9/psycopg2.egg-info/PKG-INFO
writing dependency_links to /tmp/pip-pip-egg-info-faxuxsh9/psycopg2.egg-info/dependency_links.txt
writing top-level names to /tmp/pip-pip-egg-info-faxuxsh9/psycopg2.egg-info/top_level.txt
writing manifest file '/tmp/pip-pip-egg-info-faxuxsh9/psycopg2.egg-info/SOURCES.txt'

Error: pg_config executable not found.

pg_config is required to build psycopg2 from source.  Please add the directory
containing pg_config to the $PATH or specify the full executable path with the
option:

    python setup.py build_ext --pg-config /path/to/pg_config build ...

or with the pg_config option in 'setup.cfg'.

If you prefer to avoid building psycopg2 from source, please install the PyPI
'psycopg2-binary' package instead.

For further information please check the 'doc/src/install.rst' file (also at
<https://www.psycopg.org/docs/install.html>).

----------------------------------------

ERROR: Command errored out with exit status 1: python setup.py egg_info Check the logs for full command output.

readme.md Usage section needs update

The Usage code block shows an older version of the --help output, some switches have changed. The -t option is now -dt for example.

Modify results directory

I couln't find how to redirect the results to another folder without still using de default one.

Attention: Someone stole your work

Hello there,
Someone has stole your source code and changed the name of the project.

Link : https://github.com/motasemroot/MotasemRecon

invalid syntax

File "finalrecon.py", line 128
print(G + '[+]' + C + ' Checking for Updates...', end='')
^
SyntaxError: invalid syntax

Issues with missing whois module

Successfully built ipaddr
Installing collected packages: ipaddr, ipwhois
Successfully installed ipaddr-2.2.0 ipwhois-1.1.0
┌─[antihack@parrot]─[/FinalRecon]
└──╼ $python3 finalrecon.py
Traceback (most recent call last):
File "finalrecon.py", line 9, in
from modules.whois import whois_lookup
File "/home/antihack/FinalRecon/modules/whois.py", line 3, in
import ipwhois
ModuleNotFoundError: No module named 'ipwhois'
┌─[✗]─[antihack@parrot]─[/FinalRecon]
└──╼ $python3 finalrecon.py -h
Traceback (most recent call last):
File "finalrecon.py", line 9, in
from modules.whois import whois_lookup
File "/home/antihack/FinalRecon/modules/whois.py", line 3, in
import ipwhois
ModuleNotFoundError: No module named 'ipwhois'

Error on directory search

Subdomain Enumeration Problem

Hi,

First thank you for this great tool. While I was testing it, I saw that it returns IP addresses along with the subdomains. This is also reflected to total number of subdomains. I consider this as a bug but if there are any other motivations can you please elaborate?

Thanks

Issue with version check and crawler

Hello,
After testing out the latest build, I found an issue with the version check and crawler capabilities of finalrecon.py. Initially, finalrecon.py will throw and error as it is having issues with parsing the version file from the repo and stop working. I have been able to work around this issue by commenting out the version check function. The rest of the program works fine up until the crawler function, where it just notes "Failed to parse <target_url>". If possible, I'm gonna see if its possible to incorporate something into it.

[REQUEST] Basic auth and custom cookies

Various websites require you to log in to view the content, which could turn out more images, external links (It's not too rare to share join-chat links) and a lot of other stuff

Keep up with this great work!

Subdomain Enumeration error

I have issue in the subdomain enumeration. When I use the --sub switch the following error is showing:
(kali㉿KALI)-[~]
└─$ finalrecon --sub http://tesla.com

---

/\ /\ \ /\ "-.\ \ /\ __ \ /\ \
\ \ \ \ \ \ -. \ \ __ \ \ _
\ _\ \ _\ _\"_\ _\ _\ _\
// // // // //// /_____/

---

/\ == \ /\ \ /\ \ /\ __ \ /\ "-.\ \
\ \ _< \ \ \ \ \ _\ \ /\ \ \ -. \
\ _\ _\ _\ _\ _\ _\"_\
// // // // /_____/ // //

[>] Created By : thewhiteh4t
|---> Twitter : https://twitter.com/thewhiteh4t
|---> Community : https://twc1rcle.com/
[>] Version : 1.1.6

[+] Target : http://tesla.com

[+] IP Address : 104.85.4.91

[!] Starting Sub-Domain Enumeration...

[!] Requesting AnubisDB
[!] Requesting ThreatMiner
[!] Requesting CertSpotter
[!] Requesting Wayback
[!] Requesting HackerTarget
[!] Requesting crt.sh
[+] CRT.sh found 331 subdomains!
Traceback (most recent call last):
File "/usr/bin/finalrecon", line 234, in
subdomains(domain, tout, out_settings, data, conf_path)
File "/usr/share/finalrecon/modules/subdom.py", line 54, in subdomains
loop.run_until_complete(query(hostname, tout, conf_path))
File "/usr/lib/python3.11/asyncio/base_events.py", line 653, in run_until_complete
return future.result()
^^^^^^^^^^^^^^^
File "/usr/share/finalrecon/modules/subdom.py", line 31, in query
await asyncio.gather(
File "/usr/share/finalrecon/modules/subdomain_modules/bevigil_subs.py", line 18, in bevigil
json_load = loads(json_read)
^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/json/init.py", line 346, in loads
return _default_decoder.decode(s)
^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/json/decoder.py", line 337, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/json/decoder.py", line 353, in raw_decode
obj, end = self.scan_once(s, idx)
^^^^^^^^^^^^^^^^^^^^^^
json.decoder.JSONDecodeError: Expecting property name enclosed in double quotes: line 6 column 1 (char 230) "

Please give me the solution of this problem.

dns enumeration failing

while running it with --full option using kali 2020.4, the script fails at dns enumeration step with the following error:

[!] Starting DNS Enumeration...

Traceback (most recent call last):
File "/home/kali/Desktop/repos/FinalRecon/finalrecon.py", line 275, in
full_recon()
File "/home/kali/Desktop/repos/FinalRecon/finalrecon.py", line 207, in full_recon
dnsrec(domain, output, data)
File "/home/kali/Desktop/repos/FinalRecon/modules/dns.py", line 19, in dnsrec
pkt = q.send('8.8.8.8', 53, tcp='UDP')
File "/usr/lib/python3/dist-packages/dnslib/dns.py", line 365, in send
sock.connect((dest,port))
ConnectionRefusedError: [Errno 111] Connection refused

DNS Enumeration Failing

I just installed this tool, and upon testing, I get the below error when trying to run a --full scan against any URL:

[!] Starting DNS Enumeration...

Traceback (most recent call last):
File "finalrecon.py", line 224, in
full_recon()
File "finalrecon.py", line 159, in full_recon
dnsrec(domain, output, data)
File "/Tools/FinalRecon/modules/dns.py", line 19, in dnsrec
pkt = q.send('8.8.8.8', 53, tcp='UDP')
File "/usr/lib/python3/dist-packages/dnslib/dns.py", line 365, in send
sock.connect((dest,port))
ConnectionRefusedError: [Errno 111] Connection refused

Help?

Log file not found

After a fresh install, FinalRecon can't run. Issue brought with 2ff1202

# finalrecon.py --help
Traceback (most recent call last):
  File "/opt/tools/FinalRecon/finalrecon.py", line 12, in <module>
    log_writer('Importing config...')
  File "/opt/tools/FinalRecon/modules/write_log.py", line 6, in log_writer
    logging.basicConfig(
  File "/root/.pyenv/versions/3.11.5/lib/python3.11/logging/__init__.py", line 2050, in basicConfig
    h = FileHandler(filename, mode,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/root/.pyenv/versions/3.11.5/lib/python3.11/logging/__init__.py", line 1181, in __init__
    StreamHandler.__init__(self, self._open())
                                 ^^^^^^^^^^^^
  File "/root/.pyenv/versions/3.11.5/lib/python3.11/logging/__init__.py", line 1213, in _open
    return open_func(self.baseFilename, self.mode,
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/root/.local/share/finalrecon/run.log'

API Keys Issue

The tool is not able to detect the API keys that I have added in the keys.json file. It's skipping all 4 of em ( Facebook, VT, Shodan & BeVigil) even though the API keys are added. I had cloned the repo, got inside the FinalRecon dir , then into the conf dir nd added the keys in the keys.json file nd saved it.

error after updating in KALI

Tool looks great and seems to automate things in a great way, but alas I am throwing these errors.

Kali is fully upgraded via apt upgrade and dist-upgrade as of today, running apt upgrade finalupdate reports all is 'finalrecon is already the newest version (0~20201111-0kali1)'

`[!] Starting Sub-Domain Enumeration...

[!] Requesting BuffOver
[!] Requesting ThreadCrowd
[!] Requesting crt.sh
[!] Requesting AnubisDB
[!] Requesting ThreatMiner
Traceback (most recent call last):
File "/usr/bin/finalrecon", line 265, in
full_recon()
File "/usr/bin/finalrecon", line 199, in full_recon
subdomains(domain, tout, output, data)
File "/usr/share/finalrecon/modules/subdom.py", line 166, in subdomains
loop.run_until_complete(query(hostname, tout))
File "/usr/lib/python3.8/asyncio/base_events.py", line 616, in run_until_complete
return future.result()
File "/usr/share/finalrecon/modules/subdom.py", line 149, in query
await asyncio.gather(
File "/usr/share/finalrecon/modules/subdom.py", line 123, in fb_cert
with open('conf/keys.json', 'r') as keyfile:
FileNotFoundError: [Errno 2] No such file or directory: 'conf/keys.json'
`

threading error

Hi,

upon running the program I receive the following error:
Traceback (most recent call last):
File "finalrecon.py", line 272, in
full_recon()
File "finalrecon.py", line 213, in full_recon
ps(ip, output, data)
File "/opt/FinalRecon/modules/portscan.py", line 23, in ps
t.start()
File "/usr/lib/python3.7/threading.py", line 852, in start
_start_new_thread(self._bootstrap, ())
RuntimeError: can't start new thread
kali@kali:/opt/FinalRecon# python3 --version
Python 3.7.5

Can you advise on this?
Thanks.

Keeps crashing

Update*

This seems to be caused by installing via APT. When I followed the Git Clone / PIP3 Requirements, it worked fine.

Hi - Getting an error using just --webcrawl URL

Traceback (most recent call last):
File "/usr/share/finalrecon/finalrecon.py", line 152, in fetch_meta
gh_version = json_data['metadata']['version']
KeyError: 'metadata'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/share/finalrecon/finalrecon.py", line 218, in
fetch_meta()
File "/usr/share/finalrecon/finalrecon.py", line 163, in fetch_meta
with open('metadata.json', 'r') as metadata:
FileNotFoundError: [Errno 2] No such file or directory: 'metadata.jso

Received the same error on Kali Linux WSL2 and then on my VM which is running the latest Parrot OS

Too many open files on Ubuntu 20.04

If i run finalrecon.py (with --full) I get "OSError: [Errno 24] Too many open files" exceptions in:

• File "/FinalRecon/modules/portscan.py", line 44, in sock_conn
• File "/usr/lib/python3.8/threading.py", line 870

Here is part of the errors:
************************************ start logging ******************************************
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
s.close()
s.close()
self.run()
File "/usr/lib/python3.8/threading.py", line 870, in run
OSError: [Errno 24] Too many open files

During handling of the above exception, another exception occurred:

self.run()

UnboundLocalError: local variable 's' referenced before assignment
self._target(*self._args, **self._kwargs)
self.run()
File "/usr/lib/python3.8/threading.py", line 870, in run
Traceback (most recent call last):
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
self._target(*self._args, **self._kwargs)
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
s.close()
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
UnboundLocalError: local variable 's' referenced before assignment
self._target(*self._args, **self._kwargs)
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
OSError: [Errno 24] Too many open files
self._target(*self._args, **self._kwargs)
self.run()
self._target(*self._args, **self._kwargs)
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
s.close()
UnboundLocalError: local variable 's' referenced before assignment
s.close()
UnboundLocalError: local variable 's' referenced before assignment
File "/usr/lib/python3.8/socket.py", line 231, in init
File "/usr/lib/python3.8/socket.py", line 231, in init
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
UnboundLocalError: local variable 's' referenced before assignment
self.run()
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/usr/lib/python3.8/threading.py", line 870, in run
UnboundLocalError: local variable 's' referenced before assignment
self._target(*self._args, **self._kwargs)
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
OSError: [Errno 24] Too many open files
s.close()
self.run()
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
self._target(*self._args, **self._kwargs)
self.run()
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
_socket.socket.init(self, family, type, proto, fileno)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
self.run()
s.close()
self._target(*self._args, **self._kwargs)
_socket.socket.init(self, family, type, proto, fileno)
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
self.run()
File "/usr/lib/python3.8/threading.py", line 870, in run
File "/usr/lib/python3.8/threading.py", line 870, in run
s.close()
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
Traceback (most recent call last):
File "/usr/lib/python3.8/threading.py", line 870, in run
UnboundLocalError: local variable 's' referenced before assignment
File "/home/mark/FinalRecon/modules/portscan.py", line 44, in sock_conn
OSError: [Errno 24] Too many open files
*********************************** end logging *********************************************
I'm on Ubuntu 20.04:

• uname -a:
  Linux 5.4.0-51-generic #56-Ubuntu SMP Mon Oct 5 14:28:49 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

Wrong IP of web sites if launch FinalRecon through proxychains

Hello! When I start FinalRecon through proxychains like this:

sudo proxychains4 finalrecon https://site.biz

I always get wrong IP address for every web site, it is 224.0.0.2:

[+] IP Address : 224.0.0.2

But information from DNS Enumeration is correct anyway.

I tried to specify custom DNS with -d option, but it did not help.

can not surpport https connnection

Looking for robots.txt[-] Error : HTTPConnectionPool(host='a', port=80): Read timed out. (read timeout=10)

Permission denied while starting finalrecon

In tracelabs kali I get the following while trying to start finalrecon:

zsh: permission denied: finalrecon

not sure why, and trying with sudo doesn't recognize the command

False Output

To do

• http headers best practices
• Http methods enumeration
• Dedicated hsts test
• Detect if server sends 200 for non existent urls
• Check availability on wayback before launching it
• improve output directory structure
• include timestamps in output directory
• create separate file for each module in directory
• create new directory on each run
• add ASN lookup

--sub error

python3.8 finalrecon.py --sub http://test.com

[+] Checking Dependencies...

---

/\ /\ \ /\ "-.\ \ /\ __ \ /\
\ \ \ \ \ \ -. \ \ __ \ \ _
\ _\ \ _\ _\"_\ _\ _\ _
// // // // //// /_____/

---

/\ == \ /\ \ /\ \ /\ __ \ /\ "-.\
\ \ _< \ \ \ \ \ _\ \ /\ \ \ -.
\ _\ _\ _\ _\ _\ _\"_
// // // // /_____/ // //

[>] Created By : thewhiteh4t
[>] Version : 1.0.7

[+] Checking for Updates...

[-] Exception : HTTPSConnectionPool(host='raw.githubusercontent.com', port=443): Max retries exceeded with url: /thewhiteh4t/finalrecon/master/version.txt (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f590a8bdaf0>: Failed to establish a new connection: [Errno -2] Name or service not known'))

AttributeError: module 'asyncio' has no attribute 'create_task'

The create_task top-level function was added in Python 3.7, if you use python 3.6 you should have a issue. "creat_task" was only available as a method (in 3.6) so you can invoke it like:
dirrec.py
83 tasks.append(asyncio.get_event_loop().create_task(wm_fetch(f_url, session)))
84 #tasks.append(asyncio.create_task(wm_fetch(f_url, session)))
Fully functional for python 3.6 and 3.7.

Error with CAA (Certification Authority Authorization) DNS Record Type

Description:
I encountered an issue while using FinalRecon related to the handling of the CAA DNS record type. The tool raises a KeyError during the execution, and it seems to be related to the DNS library (dnslib) used by FinalRecon.

Steps to Reproduce:

1. Run FinalRecon with a specific domain.
2. Observe the error related to the CAA DNS record type.

Expected Behavior:
The tool should handle the CAA DNS record type without raising errors.

Environment:

• FinalRecon Version: [v1.1.6]
• Python Version: [Python 3.11.7]
• Operating System: [kail linux ]

Additional Information:
Include any additional information that might be relevant to the issue. For example, details about your environment, sample commands you used, or any error messages displayed.

Screenshots or Error Output:
Attach screenshots or copy-paste error output that may help in understanding the issue.

ZSH: Segmentation Fault on Kali 2022.3

sudo apt-get install finalrecon
python3 finalrecon.py --full 'https://mydomain.com'

Running finalrecon in zsh on Kali produces:
zsh: segmentation fault python3 finalrecon.py --full 'https://mydomain.com'

Error occurs during enumeration of subdomains.

Running subdomains separately produces same error.
python3 finalrecon.py --sub 'https://mydomain.com'
zsh: segmentation fault python3 finalrecon.py --sub 'https://mydomain.com'

Is there a way to remdiate?
Thank you!

Handle exception

File "finalrecon.py", line 275, in
full_recon()
File "finalrecon.py", line 207, in full_recon
dnsrec(domain, output, data)
File "/root/finalrecon/modules/dns.py", line 19, in dnsrec
pkt = q.send('8.8.8.8', 53, tcp='UDP')
File "/usr/lib/python3.8/site-packages/dnslib/dns.py", line 365, in send
sock.connect((dest,port))
ConnectionRefusedError: [Errno 111] Connection refused

Cms detection

It would be more perfect if it is possible to identify what cms the website uses

whois error

hi, I've heve this

[!] Whois Lookup :

/usr/local/lib/python3.8/dist-packages/ipwhois/net.py:138: UserWarning: allow_permutations has been deprecated and will be removed. It is no longer needed, due to the deprecation of asn_alts, and the addition of the asn_methods argument.
warn('allow_permutations has been deprecated and will be removed. '
/usr/local/lib/python3.8/dist-packages/ipwhois/asn.py:178: UserWarning: IPASN._parse_fields_dns() has been deprecated and will be removed. You should now use IPASN.parse_fields_dns().
warn('IPASN._parse_fields_dns() has been deprecated and will be '
/usr/local/lib/python3.8/dist-packages/ipwhois/whois.py:586: UserWarning: Whois._get_nets_other() has been deprecated and will be removed. You should now use Whois.get_nets_other().
warn('Whois._get_nets_other() has been deprecated and will be '
/usr/local/lib/python3.8/dist-packages/ipwhois/whois.py:333: UserWarning: Whois._parse_fields() has been deprecated and will be removed. You should now use Whois.parse_fields().
warn('Whois._parse_fields() has been deprecated and will be '

can you help?

Error while running the script AttributeError: module 'asyncio' has no attribute 'create_task while running.

The script generated this error while running ,AttributeError: module 'asyncio' has no attribute 'create_task while running. Just replaced create_task with asyncio.ensure_future and it executed without errors.

unicode decode error [--dir] and json decode error [--sub]

root@kali:/opt/tools/finalrecon# python3 finalrecon.py --dir https://xxxx.xxxx.com -e txt,php -w wordlists/dirb_big.txt

Suggestions !!

Hi @thewhiteh4t

Wow, Hats off to you... You really made it Super Quick tool with good results even better than now findomain as I used that one too.

I will suggest you to add:

1. Facebook Developers API for Subdomain Scan

• Project Sonar(If Possible)

2. Spyse Subdomain Enum API

3. Add BruteX for Attacking on results of Port Scan Results but keep it as a different module so that user can choose whether to run it or not.

4. While Searching for Directories of main website(Which user Entered for search) should be passed through https://github.com/tomnomnom/waybackurls & https://github.com/attacker34/waybackSqliScanner
   As i got fewer results of directories with your current tool.

5. Each subdomain should be tested against these tools

https://github.com/MichaelStott/CRLF-Injection-Scanner
https://github.com/ak1t4/open-redirect-scanner/

6. add ffuf for directory searching or dirble..

I hope these are the best Enhancements which you can do for next release of this Awesome Tool.

Social engineering

ERROR SHOWS UP DURING CRAWLING A TARGET

When we use to crawl a target like the command finalrecon --crawl https://abc.com there shows up this error:
/FinalRecon/modules/crawler.py", line 387, in out
data['module-Crawler'].update({'Title':soup.title.string})
AttributeError: 'NoneType' object has no attribute 'string'

This happens only with few targets,not all target shows this error.

restart while was running on WSL2

was running on WSL2 for 3 hours my Pc restart when i try to run again i got error One instance of FinalRecon is already running

functionality [enhancement]

check out spyse API. It could help to expand the functionality of the finalrecon. could add wider subdomains or port scans, etc...

Dependency checker does not recognise the psycopg2-binary package

When trying to run this script from source, I encountered an issue where the dependency checker would complain about psycopg2-binary package not being installed, even though it definetly was installed.

I found that even though the package was named psycopg2-binary, the actual module was still called psycopg2.
This issue was most likely introduced by commit 716f133b.

no api key detected while keys are added into keys.json (m1 mac)

output below from the scan:
[!] Skipping VirusTotal : API key not found!
[!] Skipping Shodan : API key not found!

format of keys.json:
{
"virustotal": "key",
"shodan": "key"
}

Error with the psycopg2-binary python library.

I looked for someone whom had faced the same problem, but I didn't find. I also tried to install the application in either Fedora 34 and Kali LTS version, and I got the same error in both:

[+] Checking Dependencies...

[-] psycopg2-binary is not Installed!

[-] Please Execute pip3 install -r requirements.txt to Install Missing Packages

When I try to run the application I face the error above. I have the library already installed, the pip is at the latest version. I already have uninstalled it and then installed it again. I tried to uninstall python and to install it again as well. As a proof that I have this specific library installed and updated, when I run the pip3 install -r requirements.txt command, it returns:

Requirement already satisfied: psycopg2-binary in /usr/local/lib/python3.9/dist-packages (from -r requirements.txt (line 8)) (2.9.3)

Thank y'all!

"statusCode": 401, "message": "Access denied due to improperly formed hibp-api-key." }

Help

[+] API Key Found...

[+] Checking Breach status for [email protected]

[-] An Unknown Error Occurred
{ "statusCode": 401, "message": "Access denied due to improperly formed hibp-api-key." }

[+] Completed in 0.10766911506652832 seconds.
PS C:\Users\aguil\pwnedOrNot>

shows error even with dependency installed

$sudo ./finalrecon.py

[+] Checking Dependencies...

[-] tldextract is not Installed!
[-] icmplib is not Installed! 

---

$pip3 install tldextract icmplib

Requirement already satisfied: tldextract in /home/user/.local/lib/python3.8/site-packages (2.2.2)
Requirement already satisfied: icmplib in /home/user/.local/lib/python3.8/site-packages (1.1)
Requirement already satisfied: setuptools in /usr/lib/python3/dist-packages (from tldextract) (46.1.3)
Requirement already satisfied: requests-file>=1.4 in /usr/lib/python3/dist-packages (from tldextract) (1.5.1)
Requirement already satisfied: idna in /usr/lib/python3/dist-packages (from tldextract) (2.9)
Requirement already satisfied: requests>=2.1.0 in /usr/lib/python3/dist-packages (from tldextract) (2.23.0)

Subdomain, Port Scan & Dirsearch

Dear @thewhiteh4t

its looking for a good but it need enhancements like

1. Subdomain Scan
2. Port Scan
3. Dirsearch

Sincerely,

json.decoder.JSONDecodeError

Facing this Error

[!] Starting Sub-Domain Enumeration...

[!] Requesting ThreadCrowd
[!] Requesting crt.sh
[!] Requesting AnubisDB
[!] Requesting BuffOver
[!] Requesting ThreatMiner
Traceback (most recent call last):
File "finalrecon.py", line 227, in
full_recon()
File "finalrecon.py", line 164, in full_recon
subdomains(domain, tout, output, data)
File "/root/Tool/Recon/Framework/FinalRecon/modules/subdom.py", line 166, in subdomains
loop.run_until_complete(query(hostname, tout))
File "/usr/lib/python3.6/asyncio/base_events.py", line 484, in run_until_complete
return future.result()
File "/root/Tool/Recon/Framework/FinalRecon/modules/subdom.py", line 155, in query
fb_cert(hostname, tout)
File "/root/Tool/Recon/Framework/FinalRecon/modules/subdom.py", line 126, in fb_cert
json_load = json.loads(json_read)
File "/usr/lib/python3.6/json/init.py", line 354, in loads
return _default_decoder.decode(s)
File "/usr/lib/python3.6/json/decoder.py", line 339, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib/python3.6/json/decoder.py", line 355, in raw_decode
obj, end = self.scan_once(s, idx)
json.decoder.JSONDecodeError: Expecting ',' delimiter: line 4 column 40 (char 69)

Windows support

please make this project compatible with windows, i mean windows support python it will not be a complicated task and thanks