Home · ExploitCraft/ReconNinja Wiki · GitHub
Skip to content
ExploitCraft edited this page May 5, 2026 · 2 revisions
██████╗ ███████╗ ██████╗ ██████╗ ███╗   ██╗███╗   ██╗██╗███╗   ██╗     ██╗ █████╗
██╔══██╗██╔════╝██╔════╝██╔═══██╗████╗  ██║████╗  ██║██║████╗  ██║     ██║██╔══██╗
██████╔╝█████╗  ██║     ██║   ██║██╔██╗ ██║██╔██╗ ██║██║██╔██╗ ██║     ██║███████║
██╔══██╗██╔══╝  ██║     ██║   ██║██║╚██╗██║██║╚██╗██║██║██║╚██╗██║██   ██║██╔══██║
██║  ██║███████╗╚██████╗╚██████╔╝██║ ╚████║██║ ╚████║██║██║ ╚████║╚█████╔╝██║  ██║
╚═╝  ╚═╝╚══════╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═══╝╚═╝  ╚═══╝╚═╝╚═╝  ╚═══╝ ╚════╝ ╚═╝  ╚═╝

38-phase automated reconnaissance framework for authorized security testing.

⚠️ Use only against targets you own or have explicit written permission to test.


What is ReconNinja?

ReconNinja turns a single command into a full recon engagement. Point it at a domain, IP, CIDR, or a list of targets and it drives the complete pipeline — passive OSINT, port scanning, web discovery, vulnerability scanning, cloud intelligence, credential hunting, and AI-powered threat analysis — then generates HTML, JSON, Markdown, and SARIF reports.


Wiki Pages

Page Description
Installation All install methods — git, pip, Arch Linux
Quick-Start First scan in 60 seconds
Scan-Profiles fast / standard / thorough / stealth / full_suite
Pipeline-Phases All 38 phases explained
All-Flags Complete CLI flag reference
GUI Desktop GUI via browser
AI-Analysis Groq, Ollama, Gemini, OpenAI, consensus mode
Output-and-Reports HTML, JSON, Markdown, SARIF, PDF
Scan-Diff Compare two scan reports
Notifications Slack, Discord, generic webhooks
Resume Resume interrupted scans
Plugin-System Extend the pipeline with custom plugins
API-Keys Which keys are required vs optional
Tool-Dependencies External binaries — check and install
Development Contributing, code style, adding phases
FAQ Common questions and troubleshooting

Quick Install

git clone https://github.com/ExploitCraft/ReconNinja.git
cd ReconNinja && chmod +x install.sh && ./install.sh

Or via PyPI:

pip install ReconNinja

Quick Scan

# No API keys required — passive intel only
reconninja -t example.com --whois --wayback --ssl -y

# Standard scan
reconninja -t example.com

# Full 38-phase pipeline
reconninja -t example.com --profile full_suite -y

# Desktop GUI
reconninja --gui

Part of the ExploitCraft Ecosystem

Tool Description
envleaks Codebase & git history secret scanner
gitdork Google / Shodan dork generator
wifi-passview Cross-platform WiFi credential dumper
VaultHound Secret & credential scanner
ReconNinja 38-phase recon framework ← you are here

ExploitCraft · Bangladesh · Building tools that matter
📄 Full documentation → doc.emonpersonal.xyz

Clone this wiki locally