This is a powerful Dockerized recon toolkit for security researchers, red teamers, and bug bounty hunters. It combines top tools like Subfinder, Sublist3r, MassDNS, dnsx, Assetfinder, and Nmap into one unified workflow.
- Subfinder
- Sublist3r
- Assetfinder
- MassDNS
- dnsx
- httpx
- Nmap
docker build -t domain-recon .docker run --rm -v $(pwd)/output:/recon-output domain-recon example.comOutput will be saved in:
./output/example.com/unique-subs.txt– List of deduplicated subdomainsmassdns_resolved.txt– Subdomain-to-IP mappings from MassDNSdnsx_resolved.txt– DNSX resultsfinal-ips.txt– All unique IPsnmap_scan.txt– Nmap port scan results
- Docker
- Internet access to resolve domains
This tool performs passive and active recon. Make sure you have permission to scan and probe the target domains.