reconFTW

Orchestrates a wide range of reconnaissance techniques — passive and active subdomain discovery, OSINT, directory and virtual-host fuzzing, port scanning and screenshotting — and chains them into web vulnerability checks for XSS, SSRF, SQLi and more. Runs locally, in Docker or across a distributed fleet via the Ax framework, with Faraday and HTML/JSON reporting.