https://github.com/jordyv/reconstore
Reconstore is a tool for saving and querying your recon data
https://github.com/jordyv/reconstore
bugbounty recon reconnaissance
Last synced: 5 months ago
JSON representation
Reconstore is a tool for saving and querying your recon data
- Host: GitHub
- URL: https://github.com/jordyv/reconstore
- Owner: jordyv
- Created: 2021-10-01T21:03:58.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2025-08-27T11:33:55.000Z (10 months ago)
- Last Synced: 2025-08-27T20:41:58.618Z (10 months ago)
- Topics: bugbounty, recon, reconnaissance
- Language: Go
- Homepage:
- Size: 102 KB
- Stars: 3
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Reconstore
Reconstore is a tool for saving and querying your recon data. You can pipe subdomains and output of your favorite tools to reconstore to build up
your own recon database. All information is stored in a Sqlite file or Postgres so you can run your own queries if you like.
## Installation
```
go install github.com/jordyv/reconstore/cmd/reconstore@latest
```
## Configuration
Make sure there's a `reconstore.yaml` file in your home directory or the current directory. You can use `reconstore.example.yaml` as example.
## Supported databases:
Currently, the following databases are supported:
- Postgres
- Sqlite
## Usage
### Programs
Add your first program:
```
reconstore programs add --name Tesla --platform BugCrowd --bounties
```
Get a list of all your programs:
```
reconstore programs list
ID Name Slug Platform Private Has bounties
1 Tesla tesla BugCrowd no yes
```
### Subdomains
#### Store subdomains
```
echo tesla.com | subfinder | reconstore subdomains save -p tesla
```
#### Tag subdomains
```
cat nuclei | grep wordpress | cut -d ' ' -f 2 | reconstore subdomains tag -t wordpress
```
This will add a tag 'wordpress' to all already existing subdomains (this won't store new subdomains, only existing subdomains are tagged).
#### Query subdomains
Only subdomains from a single program:
```
reconstore subdomains query --slug tesla
```
Only subdomains with a paying program:
```
reconstore subdomains query --bounties
```
Subdomains with a tag:
```
reconstore subdomains query --tag wordpress
```
Subdomains with a search query:
```
reconstore subdomains query --pattern docs
```
Subdomains with a specific technology:
```
reconstore subdomains query --tech php
```
You can find all the technologies with:
```
reconstore techs list
```
#### JSON output
This will output all Tesla subdomains in the database as JSON:
```
reconstore json --slug tesla
```
You can use the same queries as for the `subdomains query` command.
## Planned features
- [x] DNS resolution on import of subdomains
- [x] Query DNS info
- [x] HTTP info - webserver, status code, title
- [x] Techs to tags - scrape HTTP, fetch technologies and store in DB
- [ ] Import nmap port scan results
- [ ] (GraphQL) API
- [ ] Web interface