Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs ~17 recon modules against it (subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more). The dashboard shows per-module output as it lands.

Stack

Quickstart — Docker Compose

git clone https://github.com/gokulapap/Reconator
cd Reconator
cp .env.example .env       # optional: add Telegram / webhook keys / API key
docker compose up --build

Quickstart — Heroku

Or via CLI (uses heroku.yml container stack — single image serves UI + API, worker dyno runs the queue):

heroku create my-reconator --stack=container
heroku addons:create heroku-postgresql:essential-0
heroku config:set ADMIN_API_KEY=$(openssl rand -hex 32)   # recommended
heroku config:set TELEGRAM_API_KEY=... TELEGRAM_CHAT_ID=...   # optional
git push heroku master
heroku ps:scale web=1 worker=1

Local development

# api
cd backend && pip install -r requirements.txt
uvicorn app.main:app --reload

# worker (separate shell)
python -m app.worker

# web (separate shell)
cd frontend && npm install && npm run dev   # proxies /api → :8000

# tests + lint
cd backend && pytest && ruff check .

Features

• Bulk add — paste up to 500 domains; per-row error / conflict report
• Tags + filtering — tag targets, filter the listing by tag
• Module selection — schedule only the modules you want per target
• Cancel + rescan — stop a running target between modules; one-click rescan
• Per-module results — each check's output is its own row, with status, timing, errors
• In-output search + highlight — filter giant subdomain dumps in place
• CSV / JSON export — pull the whole queue out of the API
• Live dashboard — counts, average scan duration, recent activity
• Optional API-key auth — set ADMIN_API_KEY, all mutations require X-API-Key
• Rate limiting — slowapi caps writes (defaults: 20/min single, 5/min bulk)
• Prometheus metrics — request rate, latency, scan counts, queue depth
• Telegram + webhook fan-out — notifier abstraction, both can run together
• Light + dark UI — preference stored per browser

API surface

OpenAPI at /docs.

Configuration

What changed from v1

• Flask → FastAPI; SQL injection vectors gone (parameterized SQLAlchemy)
• Embedded HTML → React + shadcn/ui dashboard
• Single base64 blob in DB → per-module rows with status / timestamps / errors
• cron.py polling loop → worker with row-locking, graceful shutdown, cancellation
• Manual Heroku buildpacks → container stack via heroku.yml
• Added: API-key auth, rate limiting, request IDs, Prometheus, Sentry hook, bulk import, tags, rescan, cancel, webhook notifier, CSV/JSON export

Disclaimer

For authorized testing only. Use on systems you own or have permission to assess. Released under GPL-3.0.