Architected for Speed, Stealth & Precision.
Ghost Recon is a modular reconnaissance framework designed to automate the discovery of attack surfaces with advanced visualization and reporting.
- 🌐 Interactive Network Topology: Visualizes target infrastructure nodes and IP relationships using
vis.jsgraph algorithms. - 🥷 Stealth Mode: Built-in evasion techniques (Random User-Agents, smart delays) to bypass WAFs (Akamai, Cloudflare).
- 🔄 Auto-Update System: Automatically fetches the latest subdomain wordlists (SecLists) on startup.
- 📸 Visual Intelligence: Automated screenshotting of live assets using headless browsers (Playwright).
- 📊 Enterprise Dashboard: Responsive HTML reports with DataTables, Charts, and real-time Risk Scoring.
- 🛡️ Vulnerability Detection:
- Subdomain Takeover signatures (AWS, Heroku, etc.).
- Sensitive File Fuzzing (
.env,.git,config.php). - Login Portal Hunter.
The framework follows a clean, modular design:
modules/scanner.py— Core async scanning and reconnaissance enginemodules/reporter.py— HTML/JS report and dashboard generatorconfig.json— External configuration for signatures, thresholds, and runtime settings
git clone https://github.com/osmankaankars/GhostRecon.git
cd GhostRecon
pip install -r requirements.txt
playwright install chromiumIdeal for quick reconnaissance and surface discovery.
python main.py target.comSlower, low-noise scanning to reduce detection risk.
python main.py target.com --stealthForce-update external wordlists and signatures.
python main.py target.com --update- Asyncio Migration: Full migration from ThreadPool to asyncio for ~10x performance gain.
- API Integration: Native integration with Shodan & Censys APIs.
- AI Analysis: LLM-based automated risk scoring and asset classification.
This framework is designed strictly for educational and authorized security testing purposes.
Unauthorized use against systems you do not own or have explicit permission to test is prohibited.