BAKOME-Hub/BAKOME-Recon-X
GitHub: BAKOME-Hub/BAKOME-Recon-X
一款用纯 Rust 编写的开源 Bug Bounty 侦察框架，集成了子域名发现、漏洞扫描和 AI 报告生成等攻击面枚举功能。
Stars: 1 | Forks: 0
📝 README.md
```
cd ~/bakome-recon-x && cat > README.md << 'EOF'
# 🛡️ BAKOME-Recon-X v4.0 « COLOSSUS »
[](https://www.rust-lang.org)
[](LICENSE)
[](Cargo.toml)
[](src/main.rs)
[](https://github.com/sponsors/BAKOME-Hub)
🛡️ 44+ integrated scanners · crt.sh · Shodan · Censys · AI-powered reporting · Pure Rust
--- ## 🎥 BAKOME-Recon-X 实战演示 | Demo | Video | |------|-------| | 🔍 **Full Recon Scan** | [▶️ Watch](https://video.pollinations.ai/prompt/A_realistic_video_of_a_developer_running_BAKOME_Recon_X_in_a_terminal,_scanning_a_website,_subdomains_appearing,_vulnerabilities_detected,_cyberpunk_theme?duration=5&seed=200) | | 🛡️ **Vulnerability Detection** | [▶️ Watch](https://video.pollinations.ai/prompt/A_realistic_video_of_BAKOME_Recon_X_detecting_CORS_misconfiguration_and_subdomain_takeover,_alerts_appearing,_terminal_output?duration=5&seed=201) | | 🤖 **AI-Powered Report** | [▶️ Watch](https://video.pollinations.ai/prompt/A_realistic_video_of_BAKOME_Recon_X_generating_an_AI_powered_security_report,_Ollama_processing,_Markdown_file_saved?duration=5&seed=202) | --- ## 🧠 什么是 BAKOME-Recon-X？ **BAKOME-Recon-X** is the ultimate open-source bug bounty reconnaissance and pentest framework built in pure Rust. It automates **subdomain discovery** (crt.sh, Shodan, Censys, brute force), **port scanning**, **technology detection**, **vulnerability assessment** (CORS, subdomain takeover, WordPress enumeration, secret extraction, IDOR), and **AI-powered report generation** (Ollama + DeepSeek). --- ## 🏗️ 功能特性 | Module | Description | |--------|-------------| | 🔍 **Subdomain Discovery** | crt.sh, Shodan, Censys, brute force | | ⚡ **Port Scanning** | TCP connect, top 1000 ports, async | | 🧩 **Technology Detection** | Wappalyzer-like fingerprints (WordPress, Cloudflare, React, etc.) | | 🛡️ **CORS Misconfiguration** | Wildcard, credentials, arbitrary origin | | 📁 **Sensitive Files** | .env, .git/config, backups, etc. | | 🏴 **Subdomain Takeover** | 16+ service signatures (GitHub Pages, Heroku, AWS S3, etc.) | | 📝 **WordPress Enumeration** | REST API user enumeration | | 🔑 **Secret Extraction** | API keys, tokens, passwords in JavaScript | | 🧪 **IDOR Testing** | Insecure Direct Object Reference | | 🤖 **AI Reporting** | Ollama (local) + DeepSeek (cloud) | | 📊 **Report Generation** | Markdown, JSON, Bugcrowd template | --- ## ⚙️ 快速开始 ```bash git clone https://github.com/BAKOME-Hub/BAKOME-Recon-X.git cd BAKOME-Recon-X cargo build --release cargo run -- scan example.com -o report ``` 📊 在线演示输出 ``` ╔══════════════════════════════════════════════════╗ ║ BAKOME-Recon-X v4.0 COLOSSUS ║ ╚══════════════════════════════════════════════════╝ 🔍 Scanning example.com ═══ Subdomain Discovery ═══ ✅ 15 subdomains found. ═══ Port Scanning ═══ ✅ Port 80 open ✅ Port 443 open ═══ Technology Detection ═══ ✅ Detected: Cloudflare ═══ Vulnerability Scanning ═══ ⚠️ 2 CORS issues found 🚨 1 potential subdomain takeover 🚨 3 secret leaks found ═══ AI Analysis ═══ Prioritize CORS and secret leaks... 🎉 Scan completed in 49.87s. ``` 👤 作者 BAKOME — @BAKOME-Hub 📜 许可证 MIT — 可自由使用、修改和分发。 为 bug bounty 猎人打造。由开源驱动。🚀 EOF标签：AI风险缓解, ESC6, GitHub, Rust, 侦察框架, 动态插桩, 可视化界面, 子域名收集, 实时处理, 密码管理, 网络流量审计, 通知系统