{"id":13538787,"url":"https://github.com/evyatarmeged/raccoon","last_synced_at":"2025-05-14T09:07:03.032Z","repository":{"id":40589221,"uuid":"133257682","full_name":"evyatarmeged/Raccoon","owner":"evyatarmeged","description":"A high performance offensive security tool for reconnaissance and vulnerability scanning","archived":false,"fork":false,"pushed_at":"2024-06-04T01:04:54.000Z","size":891,"stargazers_count":3183,"open_issues_count":19,"forks_count":411,"subscribers_count":110,"default_branch":"master","last_synced_at":"2025-05-14T09:06:34.915Z","etag":null,"topics":["enumeration","fuzzing","hacking","hacking-tool","information-gathering","offensive-security","osint","pentest-tool","pentesting","raccoon","reconnaissance","scanner","security-scanner","vulnerability-assessment","vulnerability-scanner"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/evyatarmeged.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-05-13T17:05:21.000Z","updated_at":"2025-05-13T08:50:21.000Z","dependencies_parsed_at":"2024-06-19T11:13:49.778Z","dependency_job_id":null,"html_url":"https://github.com/evyatarmeged/Raccoon","commit_stats":{"total_commits":177,"total_committers":8,"mean_commits":22.125,"dds":0.06779661016949157,"last_synced_commit":"9cf6c1129221aa51280f5705106660d23b2f1b92"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evyatarmeged%2FRaccoon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evyatarmeged%2FRaccoon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evyatarmeged%2FRaccoon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/evyatarmeged%2FRaccoon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/evyatarmeged","download_url":"https://codeload.github.com/evyatarmeged/Raccoon/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254110374,"owners_count":22016391,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["enumeration","fuzzing","hacking","hacking-tool","information-gathering","offensive-security","osint","pentest-tool","pentesting","raccoon","reconnaissance","scanner","security-scanner","vulnerability-assessment","vulnerability-scanner"],"created_at":"2024-08-01T09:01:16.112Z","updated_at":"2025-05-14T09:07:03.010Z","avatar_url":"https://github.com/evyatarmeged.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"170048b7d8668c50681c0ab1e92c679a\"\u003e\u003c/a\u003e工具","\u003ca id=\"a76463feb91d09b3d024fae798b92be6\"\u003e\u003c/a\u003e侦察\u0026\u0026信息收集\u0026\u0026子域名发现与枚举\u0026\u0026OSINT"],"sub_categories":["\u003ca id=\"375a8baa06f24de1b67398c1ac74ed24\"\u003e\u003c/a\u003e信息收集\u0026\u0026侦查\u0026\u0026Recon\u0026\u0026InfoGather"],"readme":"#  Raccoon\n![Racoon](https://image.ibb.co/dkAq4J/raccoon.png)\n\n#### Offensive Security Tool for Reconnaissance and Information Gathering\n![Build Status](https://travis-ci.org/evyatarmeged/Raccoon.svg?branch=master)\n![license](https://img.shields.io/github/license/mashape/apistatus.svg)\n![os](https://img.shields.io/badge/OS-Linux,%20macOS-yellow.svg)\n![pythonver](https://img.shields.io/badge/python-3.5%2B-blue.svg)\n![raccoonver](https://img.shields.io/badge/version-0.8.5-lightgrey.svg)\n\n##### Features\n- [x] DNS details\n- [x] DNS visual mapping using DNS dumpster\n- [x] WHOIS information\n- [x] TLS Data - supported ciphers, TLS versions,\ncertificate details and SANs\n- [x] Port Scan\n- [x] Services and scripts scan\n- [x] URL fuzzing and dir/file detection\n- [x] Subdomain enumeration - uses Google dorking, DNS dumpster queries,\n SAN discovery and bruteforce\n- [x] Web application data retrieval:\u003cbr\u003e\n  - CMS detection\n  - Web server info and X-Powered-By\n  - robots.txt and sitemap extraction\n  - Cookie inspection\n  - Extracts all fuzzable URLs\n  - Discovers HTML forms\n  - Retrieves all Email addresses\n  - Scans target for vulnerable S3 buckets and enumerates them\n  for sensitive files\n- [x] Detects known WAFs\n- [x] Supports anonymous routing through Tor/Proxies\n- [x] Uses asyncio for improved performance\n- [x] Saves output to files - separates targets by folders\nand modules by files\n\n\n##### Roadmap and TODOs\n- [ ] Expand, test, and merge the \"owasp\" branch with more web application attacks and scans ([#28](https://github.com/evyatarmeged/Raccoon/issues/28))\n- [ ] Support more providers for vulnerable storage scan ([#27](https://github.com/evyatarmeged/Raccoon/issues/27))\n- [ ] Add more WAFs, better detection\n- [ ] Support multiple hosts (read from file)\n- [ ] Rate limit evasion\n- [ ] IP ranges support\n- [ ] CIDR notation support\n- [ ] More output formats (JSON at the very least)\n\n\n### About\nRaccoon is a tool made for reconnaissance and information gathering with an emphasis on simplicity.\u003cbr\u003e It will do everything from\nfetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up to threaded dir busting and\nsubdomain enumeration. Every scan outputs to a corresponding file.\u003cbr\u003e\n\nAs most of Raccoon's scans are independent and do not rely on each other's results,\nit utilizes Python's asyncio to run most scans asynchronously.\u003cbr\u003e\n\nRaccoon supports Tor/proxy for anonymous routing. It uses default wordlists (for URL fuzzing and subdomain discovery)\nfrom the amazing [SecLists](https://github.com/danielmiessler/SecLists) repository but different lists can be passed as arguments.\u003cbr\u003e\n\nFor more options - see \"Usage\".\n\n### Installation\nFor the latest stable version:\u003cbr\u003e\n```\npip install raccoon-scanner\n# To run:\nraccoon [OPTIONS]\n```\nPlease note Raccoon requires Python3.5+ so may need to use `pip3 install raccoon-scanner`.\u003cbr\u003e\nYou can also clone the GitHub repository for the latest features and changes:\u003cbr\u003e\n```\ngit clone https://github.com/evyatarmeged/Raccoon.git\ncd Raccoon\npython setup.py install # Subsequent changes to the source code will not be reflected in calls to raccoon when this is used\n# Or\npython setup.py develop # Changes to code will be reflected in calls to raccoon. This can be undone by using python setup.py develop --uninstall\n# Finally\nraccoon [OPTIONS] [TARGET]\n```\n#### macOS\nTo support Raccoon on macOS you need to have gtimeout on your machine.\u003cbr\u003e\ngtimeout can be installed by running `brew install coreutils`.\n#### Docker\u003cbr\u003e\n```\n# Build the docker image\ndocker build -t evyatarmeged/raccoon .\n# Run a scan, As this a non-root container we need to save the output under the user's home which is /home/raccoon\ndocker run --name raccoon evyatarmeged/raccoon:latest  example.com -o /home/raccoon\n```\n\n##### Prerequisites\nRaccoon uses [Nmap](https://github.com/nmap/nmap) to scan ports as well as utilizes some other Nmap scripts\nand features. It is mandatory that you have it installed before running Raccoon.\u003cbr\u003e\n[OpenSSL](https://github.com/openssl/openssl) is also used for TLS/SSL scans and should be installed as well.\n\n### Usage\n```\n\nUsage: raccoon [OPTIONS] TARGET\n\nOptions:\n  --version                      Show the version and exit.\n  -d, --dns-records TEXT         Comma separated DNS records to query.\n                                 Defaults to: A,MX,NS,CNAME,SOA,TXT\n  --tor-routing                  Route HTTP traffic through Tor (uses port\n                                 9050). Slows total runtime significantly\n  --proxy-list TEXT              Path to proxy list file that would be used\n                                 for routing HTTP traffic. A proxy from the\n                                 list will be chosen at random for each\n                                 request. Slows total runtime\n  -c, --cookies TEXT             Comma separated cookies to add to the\n                                 requests. Should be in the form of key:value\n                                 Example: PHPSESSID:12345,isMobile:false\n  --proxy TEXT                   Proxy address to route HTTP traffic through.\n                                 Slows total runtime\n  -w, --wordlist TEXT            Path to wordlist that would be used for URL\n                                 fuzzing\n  -T, --threads INTEGER          Number of threads to use for URL\n                                 Fuzzing/Subdomain enumeration. Default: 25\n  --ignored-response-codes TEXT  Comma separated list of HTTP status code to\n                                 ignore for fuzzing. Defaults to:\n                                 302,400,401,402,403,404,503,504\n  --subdomain-list TEXT          Path to subdomain list file that would be\n                                 used for enumeration\n  -sc, --scripts                 Run Nmap scan with -sC flag\n  -sv, --services                Run Nmap scan with -sV flag\n  -f, --full-scan                Run Nmap scan with both -sV and -sC\n  -p, --port TEXT                Use this port range for Nmap scan instead of\n                                 the default\n  --vulners-nmap-scan            Perform an NmapVulners scan. Runs instead of\n                                 the regular Nmap scan and is longer.\n  --vulners-path TEXT            Path to the custom nmap_vulners.nse script.If\n                                 not used, Raccoon uses the built-in script it\n                                 ships with.\n  -fr, --follow-redirects        Follow redirects when fuzzing. Default: False\n                                 (will not follow redirects)\n  --tls-port INTEGER             Use this port for TLS queries. Default: 443\n  --skip-health-check            Do not test for target host availability\n  --no-url-fuzzing               Do not fuzz URLs\n  --no-sub-enum                  Do not bruteforce subdomains\n  --skip-nmap-scan               Do not perform an Nmap scan\n  -q, --quiet                    Do not output to stdout\n  -o, --outdir TEXT              Directory destination for scan output\n  --help                         Show this message and exit.\n```\n\n### Screenshots\n![poc2](https://image.ibb.co/iyLreJ/aaaaaaaaaaaaa.png)\u003cbr\u003e\n\n**Web application data including vulnerable S3 bucket:**\u003cbr\u003e\n![somepoc](https://image.ibb.co/m6b3Jz/s3.png)\n\n**[HTB](https://www.hackthebox.eu/) challenge example scan:**\u003cbr\u003e\n![poc](https://image.ibb.co/bGKTRy/bbbbbbb.png)\u003cbr\u003e\n\n**Nmap vulners scan results:**\u003cbr\u003e\n![vulnerspoc](https://image.ibb.co/iaOMyU/nmap_vulners_poc.png)\u003cbr\u003e\n\n**Results folder tree after a scan:**\u003cbr\u003e\n![poc3](https://image.ibb.co/iyaCJd/poc3.png)\n\n### Contributing\nAny and all contributions, issues, features and tips are welcome.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fevyatarmeged%2Fraccoon","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fevyatarmeged%2Fraccoon","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fevyatarmeged%2Fraccoon/lists"}