View Issue Details

IDProjectCategoryView StatusLast Update
0009965Kali LinuxNew Tool Requestspublic2026-11-08 18:58
ReporterJoseph Avatiants Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0009965: [New Tool Request] web-recon - High-performance async OSINT perimeter scanner
Description

Tool Information

Tool Description

Web-Recon is a high-performance, production-grade asynchronous CLI/TUI utility engineered for passive reconnaissance (OSINT) and rapid network perimeter health tracking.

Unlike traditional, rigid brute-forcers or standalone domain checkers (like Gobuster or basic whois tools), Web-Recon bridges the gap between reactive asynchronous scanning speeds and multi-dimensional OSINT data enrichment in a single execution pipeline.

Key Features & Value to Kali Linux

  1. Asynchronous Perimeter Probing: Built on a reactive non-blocking I/O model (asyncio + aiohttp), enabling massive, concurrent request bursts through a persistent ClientSession pipeline.
  2. Automated Event-Driven OSINT Enrichment: Upon detecting any network anomaly (connection drops, timeouts, or non-200 HTTP codes), the tool automatically triggers thread-isolated background workers (via asyncio.to_thread) to fetch complete WHOIS profiles without blocking the frame rate of the main TUI.
  3. Structured Persistent Storage: Instantly packages all discovered anomalies and WHOIS metadata into an atomic SQLite relational database out-of-the-box, saving penetration testers from manual logs manipulation.
  4. Production-Ready & Flexible: Features precise concurrency control via asyncio.Semaphore (-c), sub-second precision stealth delays (-d) to evade WAF/Cloudflare tracking, and a Headless Silent Automation Mode (--quiet) for seamless integration into multi-tool bash pipelines.

Code Quality & Packaging Standards

  • Complies with the Debian Policy Manual specifications (headless automation support, strict argument parsing via argparse).
  • Formatted with a clean build manifest (pyproject.toml) for standardized backend compilation.
  • Covered by an automated testing suite (pytest + pytest-asyncio) running via continuous integration (GitHub Actions CI pipeline).
  • Audited against the Bandit SAST Scanner with No issues identified metrics (0 flaws found).

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-11-08 18:58 Joseph Avatiants New Issue