Automate the recon, keep your time for the part that actually needs a hacker

Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against each service, scan for known vulnerabilities and look for public exploits. It's almost the same sequence every time, it takes hours of watching terminals, waiting for executions to finish and copying results from one tool into the next one, and none of it is the part where your skills make the difference.

Rekono does that work for you. You define a target and it chains the hacking tools by itself, what one tool discovers becomes the input of the ones that come next. So, the ports found are scanned by the right tools, the technologies detected are checked for known vulnerabilities, and the vulnerabilities are matched against public exploit databases. Everything lands in one place, deduplicated, linked to the host and the port where it lives, and enriched with the information that you would otherwise look up by hand.

It's a platform, not a script. Projects for your engagements, roles for your team, notes to write down what you are thinking, collaborative triage, automatic resolution of findings, metrics, reports for your deliverables, and scheduled or repeated scans to keep watching an attack surface over time.

Best of all, you don't have to wait in front of it. Rekono notifies you by email or Telegram as soon as something worth your attention shows up, so when you sit down, you already have an attack surface mapped, prioritized and full of leads.

Quick Start

docker compose up -d --scale executions-worker=5

Go to https://127.0.0.1 and log in with rekono:rekono. Change that password the first time you log in

Upgrading from Rekono 1.x? Read the upgrade guide first. The database migration runs on its own, but there are things that you should know

Features

• Pentesting processes: Rekono runs a full assessment by itself, chaining the tools so that whatever one of them discovers is immediately attacked by the next one. Build your methodology once and launch it against any target with a single click.
• One attack surface, not a pile of raw outputs: The same finding reported by three different tools is one finding in Rekono, attached to the host, the port or the technology where it was found. You get a clean inventory of what your target exposes, instead of the output of every execution.
• Vulnerability management: Confirm the real vulnerabilities and dismiss the false positives once and for all. Don't waste time with findings that are gone, Rekono marks them as fixed as soon as the executions stop detecting them, brings them back with your verdict intact if they ever return, and remembers how long they were exposed.
• Vulnerabilities with context: Every CVE discovered is enriched with what the security community already knows about it, so you can tell how serious it really is, how likely it is to be exploited, and how to get rid of it, without opening a single browser tab. Prioritization comes for free.
• Alerts that reach you: Tell Rekono what you are hunting for and it will let you know the moment it shows up, wherever you are, so you never have to sit in front of the platform waiting for it.
• Metrics that tell the story: See how exposed a project is, where the risk is concentrated and how everything evolves over time.
• Reports ready to deliver: Turn a whole assessment into a deliverable in seconds, with your own template, and skip the part of the job that nobody enjoys.
• Notes for the whole team: Write what you found and what you plan to do next, and share it with your teammates so nobody repeats the work that is already done and everyone works with the same knowledge.
• Customize your scans: Decide how aggressive each scan is, send it through your own proxy and give the tools the headers and the credentials that your target expects.
• Hack from anywhere: The Telegram bot launches scans and delivers the findings straight to your phone, and if you need the automation of the automation, everything that Rekono does is one API call away.

Hacking Tools

Rekono supports the execution of 19 hacking tools:

• OSINT: theHarvester, EmailHarvester
• Host, ports and services enumeration: Nmap
• Enumeration: Dirsearch, Gobuster
• SSL and TLS: Sslscan, SSLyze
• Exposed secrets: GitLeaks
• SSH: SSH Audit
• SMB: SMBMap
• Web: Log4j Scan, Spring4Shell Scan, CMSeeK, OWASP JoomScan, OWASP ZAP, Nikto
• Vulnerability scanners: Nuclei
• Exploits: SearchSploit, Metasploit

Integrations

The findings detected by the hacking tools are nothing if we don't enrich them with information from external sources or if we don't share them with the right people at the right time. This is why Rekono supports multiple integrations:

Get Involved

Join our community in Discord and follow us on .

Rekono is an open source project with only one maintainer, working in his free time and with no external funds. You can support the project or simply appreciate our work with your donations on Ko-fi or Buy me a Coffee.

Rekono is open to suggestions and improvements, don't hesitate to create an issue or contribute something cool to the project. Check our CONTRIBUTING guidelines

Do you want to know more? The Rekono name comes from Esperanto and it means recon

License

Rekono is licensed under the GNU GENERAL PUBLIC LICENSE Version 3

Disclaimer

Rekono is intended only for authorized security testing, education and research, so you must have explicit permission to test every target that you add to it. You are solely responsible for the use that you make of the project, which its authors, maintainers and contributors provide as is, without warranty of any kind, and for which they accept no liability for any damage or legal consequence arising from its misuse.