xrecon

xrecon is a powerful web fingerprinting tool with CDN detection capabilities. It assists security researchers and penetration testers in quickly identifying the technology stack of target websites and determining if they use a CDN.

Features

• Support for single URL and bulk URL file inputs
• Web fingerprinting using the fingers library
• Integrated CDN detection with cdncheck
• Multiple output formats: terminal, CSV, and TXT
• Automatic URL completion (if http:// or https:// is not provided)

Installation

Ensure you have Go 1.18 or higher installed, then run:

go get -u github.com/zer0yu/xrecon

Usage

Basic Usage

Scan a single URL:

xrecon -url https://example.com

Scan a list of URLs from a file:

xrecon -file urls.txt

Output Options

By default, results are displayed in the terminal. Use the -output and -o options to specify the output format and file:

xrecon -url https://example.com -output csv -o results
xrecon -file urls.txt -output txt -o results

Output Example

URL: https://example.com
Fingerprint: apache http server:wappalyzer||easy-software-ranzhi-oa:goby
CDN Info: CDN: true, Provider: Cloudflare, Type: cdn

URL: https://google.com
Fingerprint: Google Web Server:wappalyzer
CDN Info: CDN: false, Provider: , Type: 

Development Plan

• active mod
• passive mod
• update workflow

Contributing

Contributions are welcome! Feel free to submit bug reports, feature requests, or pull requests.

License

This project is licensed under the MIT License. See the LICENSE file for details.

Disclaimer

This tool is for educational and research purposes only. Unauthorized testing with this tool may violate laws. Users are responsible for all consequences of using this tool.

Acknowledgements

• fingers - Web fingerprinting library
• cdncheck - CDN detection library [support china cdn list]

Contact

If you have any questions or suggestions, please open an issue on GitHub.

---

Happy scanning!