recon-utils

Small collection of recon/OSINT helper scripts I use for bug bounties and CTFs. Nothing fancy, just stuff that saves me time.

Scripts

subdomain_brute.py

DNS-based subdomain brute forcer. Threaded, no external services.

pip install dnspython
python3 subdomain_brute.py -d target.com -w wordlist.txt -o results.txt

header_check.py

Quick HTTP security header audit. No deps beyond stdlib.

python3 header_check.py https://target.com

Notes

• Wordlists: SecLists
• Use responsibly, only on systems you have permission to test.