🔥 X-Recon v3.0

🛡️ Elite Cybersecurity Reconnaissance Toolkit

Professional-grade security reconnaissance with AI-powered analysis and modern web interface

Created with ❤️ by Muhammad Izaz Haider

🚀 Quick Start • ✨ Features • 📸 Screenshots • 🔧 Installation • 👤 About Me

🎯 What is X-Recon?

X-Recon is an all-in-one cybersecurity reconnaissance toolkit designed for security professionals, penetration testers, and bug bounty hunters. It combines powerful scanning modules with an AI assistant and a sleek cyberpunk-themed web interface.

🔥 The Evolution

v1.0 → CLI Tools Only
v2.0 → CLI + AI Integration  
v3.0 → CLI + AI + Web Dashboard ← You are here!

💡 Why X-Recon?

🚀 All-in-One - No switching between tools
🤖 AI-Powered - Smart analysis & suggestions
🌐 Web Interface - Modern, real-time dashboard
⚡ Async - Blazing fast scans

🚀 Quick Start

# Clone the repository
git clone https://github.com/mizazhaider-ceh/X-Recon.git
cd X-Recon

# Install dependencies
pip install -r requirements.txt

# Set up AI (optional but recommended)
echo "CEREBRAS_API_KEY=your_api_key" > .env

# Launch X-Recon
python main.py

💡 Select Option 1 → Opens web dashboard at http://127.0.0.1:8000

⚡ One-Liner for Windows

git clone https://github.com/mizazhaider-ceh/X-Recon.git && cd X-Recon && pip install -r requirements.txt && python main.py

📁 Project Structure

X-Recon/
├── main.py                 # Main entry point
├── server/                 # Backend server files
│   ├── server.py          # FastAPI web server
│   ├── server_manager.py  # Server lifecycle management
│   └── config.py          # Configuration
├── modules/               # Scan modules
│   ├── port_scanner.py
│   ├── subdomain_scanner.py
│   ├── dir_bruteforcer.py
│   ├── email_harvester.py
│   ├── ai_assistant.py
│   └── ...
├── web/                   # Frontend files
│   ├── index.html
│   ├── css/
│   └── js/
│       ├── components/
│       ├── api.js
│       ├── router.js
│       └── state.js
├── results/               # Scan reports (HTML)
└── wordlists/            # Fuzzing wordlists

✨ Features

🌐 Web Dashboard

✅ Real-time Terminal - Live scan output via WebSocket
✅ Scan Controls - Start, stop, monitor scans
✅ Command Input - Enter terminal commands directly
✅ Session Persistence - Preserves history on refresh
✅ Responsive Design - Works on all devices

🤖 AI Assistant (X-AI)

✅ Powered by Cerebras - Llama 3.3 70B model
✅ Context-Aware - Knows X-Recon toolkit
✅ Syntax Highlighting - Beautiful code blocks
✅ Quick Actions - One-click common queries
✅ Export Chats - Download conversations

🔍 Reconnaissance Modules

Module	Description	Speed
🚀 Port Scanner	Async TCP port scanning	⚡ 1000+ ports/sec
🌐 Subdomain Scanner	DNS enumeration	⚡ 500 concurrent
📁 Directory Bruteforcer	Web path fuzzing	⚡ 200 concurrent
📧 Email Harvester	OSINT email collection	🔍 Multi-source
🔎 Service Detector	Banner grabbing	🎯 Smart detection
🛡️ CVE Lookup	Vulnerability search	📊 NVD database
🧬 DNS Scanner	WHOIS & DNS intel	📋 Full records
🔧 Nmap Integration	Advanced OS detection	🔬 Deep scan

📸 Screenshots

🖥️ CLI Interface

💻 Main Menu - Command Center

Features:

ASCII art banner with creator info
Color-coded menu options
Phase-based organization
Clean, professional terminal UI

🔍 Scanning in Action

Features:

Real-time scan output
Progress indicators
Color-coded results
Module execution logs

🌐 Web Dashboard

📊 Dashboard - Command Center

Features:

Quick scan with module selection
Real-time terminal output
Interactive command input
Live stats and status

🎯 Scanner - Multi-Module

Features:

Target configuration
Module selection with descriptions
One-click scan launch
Real-time progress tracking

🤖 AI Assistant - X-AI

Features:

Cybersecurity Q&A
Code syntax highlighting
Keyword emphasis (CVEs, tools)
Export conversations
Model selection (Llama 70B/8B)

📋 Reports - Professional Output

Features:

HTML report viewer
Download & delete options
Sortable by date/type
Interactive report content

🔧 Installation

Prerequisites

Python 3.8+
pip package manager
(Optional) Nmap for advanced scanning

Step-by-Step

# 1. Clone repository
git clone https://github.com/mizazhaider-ceh/X-Recon.git
cd X-Recon

# 2. Create virtual environment (recommended)
python -m venv venv
source venv/bin/activate  # Linux/Mac
# or: venv\Scripts\activate  # Windows

# 3. Install dependencies
pip install -r requirements.txt

# 4. Configure AI (optional but recommended)
cp .env.example .env
# Edit .env and add your Cerebras API key

# 5. Launch
python main.py

🤖 Get Cerebras API Key (Free!)

Go to https://cloud.cerebras.ai/
Sign up for free account
Generate API key
Add to .env file

💡 Why Cerebras? Llama 3.3 70B at lightning speed — perfect for security analysis!

🎯 Usage

Web Interface (Recommended)

Run python main.py
Select Option 1 - Launch Web Dashboard
Navigate to http://127.0.0.1:8000
Go to Scanner tab
Enter target and select modules
Click INITIATE OFFENSIVE SCAN
View real-time output in Dashboard terminal
Check Reports tab for HTML results

CLI Mode

python main.py
# Select Option 2 for CLI scan
# Select Option 3 for AI Assistant

📊 Report Format

All scan results are saved as HTML reports in the results/ directory:

Interactive - Click to expand sections
Professional - Clean, modern design
Comprehensive - All findings with timestamps
Shareable - Self-contained HTML files

⚙️ Configuration

Environment Variables

Create a .env file:

CEREBRAS_API_KEY=your_api_key_here

Get your API key from: https://cloud.cerebras.ai/

Server Settings

Edit server/config.py:

SERVER_HOST = "127.0.0.1"
SERVER_PORT = 8000
RESULTS_DIR = "results"

🛡️ Security Best Practices

✅ Legal Use Only - Only scan targets you own or have permission to test
✅ Rate Limiting - Respect target servers
✅ Stealth Mode - Use low-noise scanning when needed
✅ Responsible Disclosure - Report vulnerabilities ethically

🔧 Development

Adding New Modules

Create modules/your_module.py
Follow the template structure
Add to Scanner component in web/js/components/Scanner.js
Module will auto-integrate with web dashboard

Tech Stack

Backend: Python 3.8+, FastAPI, WebSockets
Frontend: Vanilla JavaScript (ES6+), HTML5, CSS3
AI: Cerebras Cloud SDK
Architecture: SPA with hash routing

📝 Changelog

v3.0 (Current - February 2026)

✅ Complete web dashboard overhaul
✅ Real-time terminal with WebSocket streaming
✅ Scan start/stop controls
✅ Terminal command input
✅ AI assistant with syntax highlighting
✅ Model selection (Llama 70B/8B)
✅ Chat export functionality
✅ Quick action buttons
✅ Keyword highlighting (CVEs, tools, names)
✅ CSS modular architecture (14 files)
✅ Session persistence
✅ Professional HTML reports
✅ Fixed subdomain/directory scanner bugs

v2.0

CLI-based scanning
Basic HTML reports
AI integration

v1.0

Initial release
Core scanning modules

🤝 Contributing

Contributions welcome! Please:

Fork the repository
Create a feature branch
Make your changes
Submit a pull request

📄 License

MIT License - See LICENSE file for details

👤 The Story Behind X-Recon

🚀 From a Pakistani Village to European Cybersecurity

"As a cybersecurity engineer, I thought: first build CLI tools, then add AI integration, then a web interface. CLI + AI + Web GUI. It took me a lot of time, but now it's done."

X-Recon started as a personal project to solve a real problem: too many scattered tools, no unified workflow. As a penetration tester, I was tired of switching between terminals, scripts, and tools. I wanted everything in one place.

📍 The Journey

Phase	What I Built	Why
v1.0	CLI scanning modules	Learn by building
v2.0	Added AI assistant	Smart analysis needed
v3.0	Full web dashboard	Professional workflow

💡 Philosophy

✅ Building over collecting certificates
✅ Practice over theory
✅ Real tools over endless tutorials
✅ If I fail, the failure is mine. If I succeed, the credit belongs to Allah.

👤 Author

Muhammad Izaz Haider

Junior DevSecOps & AI Security Engineer @ Damno Solutions
Penetration Tester | Cybersecurity Student @ Howest University 🇧🇪
AI Security Researcher | Founder @ The PenTrix

🇵🇰 → 🇧🇪 From a small Pakistani village to Belgium's cybersecurity field

Built on self-learning, persistence, and faith — Alhamdulillah 🤲

🤝 Want to Build Together?

Got ideas? Found a bug? Want to contribute?

I'm always open to collaboration! Whether you want to:

🐛 Report issues
💡 Suggest features
🔧 Submit pull requests
💬 Just chat about cybersecurity

Reach out on LinkedIn — Let's build the future of security together!

⭐ Star this repo if you find it useful!

Made with ❤️ by Muhammad Izaz Haider

"Don't wait for opportunities; build them."

Name		Name	Last commit message	Last commit date
Latest commit History 9 Commits
modules		modules
screenshots		screenshots
server		server
web		web
.env.example		.env.example
.gitignore		.gitignore
README.md		README.md
main.py		main.py
requirements.txt		requirements.txt
setup_ai.py		setup_ai.py
start.bat		start.bat

Folders and files

Latest commit

History

Repository files navigation

🔥 X-Recon v3.0

🛡️ Elite Cybersecurity Reconnaissance Toolkit

🎯 What is X-Recon?

🔥 The Evolution

💡 Why X-Recon?

🚀 Quick Start

📁 Project Structure

✨ Features

🌐 Web Dashboard

🤖 AI Assistant (X-AI)

🔍 Reconnaissance Modules

📸 Screenshots

🖥️ CLI Interface

🌐 Web Dashboard

🔧 Installation

Prerequisites

Step-by-Step

🤖 Get Cerebras API Key (Free!)

🎯 Usage

Web Interface (Recommended)

CLI Mode

📊 Report Format

⚙️ Configuration

Environment Variables

Server Settings

🛡️ Security Best Practices

🔧 Development

Adding New Modules

Tech Stack

📝 Changelog

v3.0 (Current - February 2026)

v2.0

v1.0

🤝 Contributing

📄 License

👤 The Story Behind X-Recon

🚀 From a Pakistani Village to European Cybersecurity

📍 The Journey

💡 Philosophy

👤 Author

Muhammad Izaz Haider

🤝 Want to Build Together?

⭐ Star this repo if you find it useful!

About

Topics

Resources

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

Packages