📦Installation •📸Screenshots •🛠️Workflow •🔌Plugin System •🏗️Organised Scan Output
ReconCraft is a modular reconnaissance & vulnerability scanning framework with a modern PyQt5 GUI.
It is designed for penetration testers, bug bounty hunters, and security professionals who want efficiency, accuracy, and extensibility.
⚡ Linux Supremacy- Battle Tested on Linux 🐧
🔌 Dynamic plugins – Add or remove tools in /plugins reflected in UI.
🚀 Parallel scanning Across multiple tools & targets.
🎛 Forge Your Profiles – Create your own Aggressive, Normal, Passive and Custom mode.
📊 Dashboard & Reports – Instant scan summaries, browsable results.
🧮 CVSS Calculator – v3.1 Interactive scoring (v4.0 coming soon)
🛡 Tool health checks – One-click verification
📥 Auto-installer – apt, pip, go, git, Docker supported.
🛑 Abort anytime – Co-operative cancel for scans & installs
🔑 Sudo awareness – Smart prompts & UI alerts (no frozen windows)
🌐 Auto-assist – If installs fail, opens manual docs or support tab in browser.
📜 Real-time output – Status updates, logs, and progress bars.
🧹 Resource control – Tweak concurrency at your will for stable/hyper performance.
🎨 Modern PyQt5 UI – Themes, icons, responsive design
🆓 Open source – MIT licensed
ReconCraft/
├── main.py # Entry point for GUI
├── install.py # Installer script
├── core/ # Core engine (controller, scan thread, installer utils, file conventions, cvss_calc)
├── gui/ # PyQt5 GUI (tabs: Scan, Reports, Settings, Dashboard, CVSS Calc.)
├── plugins/ # Drop-in tool plugins (nmap, amass, nuclei, etc.)
├── assets/ # Icons, logos, screenshots
├── requirements.txt # Python dependencies
└── README.md
- Dashboard (Home) – Summary of completed scans with status indicators.
- Scan – Select plugins, configure arguments, start/abort scans.
- Settings – Choose scan profiles (
Aggressive,Normal,Passive,Custom). - Reports – Browse & view reports directly within the UI.
- CVSS Calc. – Interactive CVSS 3.1 base score calculator.
Plugins are self-contained Python files under /plugins.
❗ They handle Install Missing tools and all Scan Profiles.❗
# Required
REQUIRED_TOOL = "toolname" # Used for installation
INSTALL_HINT = "apt" # one of: apt | brew | choco | pip | go | git | manual | docker
# Optional
INSTALL_URL = "" # Docs/repo page (shown to user for manual/git)
EXECUTABLE = "" # How ReconCraft should call it; default = REQUIRED_TOOL
TOOL_ALIAS = "" # shim/alias (used esp. for Docker); default = EXECUTABLE or REQUIRED_TOOL
DOCKER_RUN = "" # only if INSTALL_HINT == "docker"
# Default arguments for different scan profiles
DEFAULT_ARGS = {
"Aggressive": "-arg1 -arg2 -extra-aggressive {{target}}",
"Normal": "-arg1 -arg2 {{target}}",
"Passive": "DISABLED", # set to DISABLED to skip in Passive mode
"Custom": "{{target}}", # GUI replaces with user input when profile=Custom
}
def build_command_args(target, custom_args=None): ...
def get_install_info(): ...
def validate(): ...
def run(): ...Current plugins include: nmap, amass, naabu, nuclei, testssl, subfinder, rustscan, wafw00f, gobuster, and more.
Scan Results/
└─ multi_2025-08-25_03-22-40
├─ All Reports
│ ├─ domain.com # First Target (Domain/IP)
│ │ ├─ nmap # First Tool
│ │ │ └─ 20250825_032240
│ │ │ ├─ raw_nmap.log
│ │ │ ├─ formatted/ #In Upcoming Updates
│ │ │ └─ exports/
│ │ └─ sslscan # Second Tool
│ │ └─ 20250825_032241
│ │ ├─ raw_sslscan.log
│ │ ├─ formatted/
│ │ └─ exports/
│ ├─ tesla_com # Second Target (Domain/IP)
│ │ ├─ nmap/ └─ 20250825_032258/ (raw_nmap.log …)
│ │ └─ sslscan └─ 20250825_032259/ (raw_sslscan.log …)
│ └─ 127.0.0.1 # Third Target (Domain/IP)
│ └─ nmap └─ 20250825_032340/ (raw_nmap.log …)
└─ machine #Future purpose not for current funtioning git clone https://github.com/sneakywarwolf/ReconCraft.git
cd ReconCraft
python install.py #Automatically creates python venv and install requirements
sudo python main.py
⚠️ Use sudo since some tools require sudo rights. Use “Check Tools” or “Install Missing Tools” for help
- Launch ReconCraft
- Run with SUDO for optimal functionality.
- Check Tools
- One-click check for installed/missing tools.
- Auto-install missing tools (via apt, pip, go, git, Docker) or provide manual assistance.
- Configure Scan
- Input targets: Strictly IP/ Domain Only
- Select plugins: nmap, nuclei, amass, gobuster, etc.
- Choose profile via settings: Aggressive, Normal, Passive, or Custom.
- Start Scan
- Real-time output with logs and progress bars.
- Option to safely abort scans anytime.
- Monitor Scans
- View progress via the Output screen and elapsed timer.
- Access scan summaries in the Dashboard.
- Open results directly from the Reports tab.
- Score Impact
- Use the CVSS Calculator (v3.1 supported, v4.0 planned) for manual severity assessment.
| Scan Tab | Check Tools with Dynamic Status |
|---|---|
 |
 |
| CVSS-Calc | Some Tools Missing |
|---|---|
 |
 |
| Scan Running | Scan Profiles |
|---|---|
 |
 |
| Report Viewing | Themes to Switch |
|---|---|
 |
 |
- Integrating AI Agents (Kindly contribute ;)
- Dynamic/Impressive Dashboard to List critical items
- Automatic Updates
- Extracting CVEs for More dynamic Reporting
- Multiple Workflows
- Modular Chaining
✅ Permitted Use Cases Authorized Pentests – Only with written consent from the system owner Bug Bounty Engagements – Stay strictly within program rules & defined scope CTFs & Labs – Safe, educational, and competitive practice grounds Personal/Owned Systems – Research on infrastructure you control or are cleared to test Red Team Missions – Conducted under explicit organizational approval
❌ Prohibited Activities Unapproved Testing – Never probe systems without explicit permission Illegal / Malicious Actions – No exploitation for harm or personal gain Data Exfiltration – Accessing or stealing information you’re not authorized to handle
Contributions, issues, and PRs are welcome!
See CONTRIBUTING.md for details.
ReconCraft is released under the MIT License.
You must retain credit to the original author ("Nirmal Chakraborty") in all copies or substantial portions, and in any derivative works.
If you use, extend, or share ReconCraft or any part of it, please provide visible attribution and a link to the original project.
- GitHub: sneakywarwolf
- LinkedIn: Nirmal Chakraborty
- Email: sneakypentester@gmail.com
Craft your recon. Craft your edge. — ReconCraft