ReconNinja wraps many external binaries. Python-only fallbacks exist for the most critical functions, but installing the full toolset gives you the best results.

reconninja --check-tools

Prints a table showing which tools are available and which are missing.

Since you're on Arch with paru, here's a one-shot install of the most important tools:

# System packages
sudo pacman -S nmap whatweb nikto bind

# AUR packages
paru -S rustscan masscan amass feroxbuster aquatone

# Go tools (install Go first: sudo pacman -S go)
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
go install github.com/ffuf/ffuf/v2@latest
go install github.com/tomnomnom/assetfinder@latest
go install github.com/sensepost/gowitness@latest

# Python tools
pip install wafw00f dirsearch

# Add Go bin to PATH if not already there
echo 'export PATH=$PATH:$HOME/go/bin' >> ~/.zshrc
source ~/.zshrc

After install, verify:

reconninja --check-tools

The install.sh script can optionally add the BlackArch repository to your Arch system. This unlocks 2800+ security tools installable via pacman.

When prompted during ./install.sh, type y to add it.

If you only want the Python core without any external binaries:

./install.sh --python-only

The async TCP scanner (Phase 2b) serves as a fallback port scanner. JavaScript extraction, CORS scanning, JWT scanning, and most v7/v8 modules are pure Python and work without external tools.

• Installation — full install guide
• Pipeline-Phases — which phases need which tools