v1.3.0

• Password spraying
• 4xx bypasser
• S3 buckets finder
• Custom resolvers list generated on install/update
• New subdomains wordlists
• DNS Zone transfer
• Improved installer with auto update feature

v1.2.3

• Removed some duplicated steps
• New subdomains sources: github-subdomains, anubis and mildew
• New subdomain and permutations lists
• Installer fixed
• Enhanced updater

v1.2.2

• Threads control in cfg file
• Blc roll back to wget with Interlace
• Multidomain target allowed
• Some fixes

v1.2.1

• Performance improvements
• Added H8mail for the OSINT part
• Small fixes

v1.2.0

• Osint checks (domain info, users and emails, metadata and passwords leaks).
• Organized output files in folders.
• Modes/flags cleaned (recon, passive, subdomains and all).
• WAF detection in subdomains.
• Gospider instead hakrawler.
• Gowitness instead webscreenshot.
• Notify added in every step.
• Multiple fixes and improvements.

v1.1.0

• Config file
• BLH
• Diff mode
• SQLi
• SSTI
• Gentle mode
• Subs from CNAME
• Subs from source code
• SSRF in values and headers
• Small and big subdomains wordlist provided

v1.0.1

Some minor improvements:

• Installer full golang support
• User-Agent in more steps
• Uddup added
• GitDorker better output
• Better params workflow
• Improved url filtering
• Notify configuration detection
• Better http probe accuracy
• Clean empty files and folders
• Better openredirex output
• Naabu removed

v1.0.0

v1.0.0 release

What's new (since last release)

• Countless changes and improvements in workflow
• Improved installer with Golang full installation
• LFI, CRLF, Open redirects
• RPi/ARM and Docker support (also in DockerHub)
• Notification support (Telegram, Discord and Slack)
• New wiki
• New logo
• Improved stability
• Out of scope subdomains list support
• Steps already performed detection
• New --deep and --fs (full scope) flags

Docker image

• docker pull six2dez/reconftw

First official release

This first official release has a ton of bug fixes, plus some cool changes and features:

• New and polished installer compatible with most distros.
• Tools checker.
• Google Dorks results (based on deggogle_hunter).
• Added subdomainizer for subdomain recon.
• Added crawler and github-endpoints for url extraction.
• Added lot of improvements in JS analysis (LinkFinder, SecretFinder and scripts from JSFScan)
• Cors (Corsy)
• Interlace integration in some tasks to enhance speed
• Output folder customization
• Added standalone steps (subdomains, subtko, web, gdorks...)