AS-RECON is a high-speed subdomain enumeration and passive recon tool built for bug bounty hunters, OSINT researchers, and penetration testers. It provides fast, automated, and reliable subdomain discovery, making bug bounty reconnaissance easier.
AS-RECON helps security researchers and bug bounty hunters automate subdomain discovery and reconnaissance.
It supports passive enumeration, integrates multiple data sources, and provides clean outputs for further analysis.
AS-RECON is not just another subdomain recon tool. It is built with enterprise-grade intelligence to give bug bounty hunters, penetration testers, and OSINT researchers a competitive edge.
- Massive Subdomain Enumeration: Handles large domains with thousands of subdomains without slowing down.
- Intelligent Prioritization: Automatically detects high-value targets and live subdomains for faster results.
- Multi-Source OSINT Integration: Combines data from multiple passive sources to uncover hidden endpoints.
- Real-Time Live Checks: Detects which subdomains are active and reduces noise for accurate reporting.
- Automated Reporting: Export results in multiple formats (TXT, JSON, CSV) ready for bug bounty submissions.
- Modular & Scalable: Easy to add custom modules or integrate with other security tools.
- Amass Alternative: Comparable power, but faster and lightweight for personal and professional usage.
- Enterprise-Grade Reliability: Designed to run on multiple platforms, including Linux, macOS, and Termux.
⚡ Note: AS-RECON was designed for speed, accuracy, and real-world bug bounty performance — your go-to recon companion for both small and large targets.
- Fast subdomain enumeration
- Passive reconnaissance & OSINT integration
- Export results in multiple formats
- Bug bounty focused
- Modular design for easy customization
- Alternative to Amass for efficiency
# Clone the repository
git clone https://github.com/hakspare/as-recon-subdomain-tool.git
# Change directory
cd as-recon-subdomain-tool
# Make setup executable
chmod +x setup.sh
# Run setup
./setup.sh
Requires Python 3.x installed
Usage
# Basic usage
as-recon -d example.com
# Scan live subdomains only
as-recon -d example.com --live
# Save output to a file
as-recon -d example.com -o results.txt
Examples
Example terminal output:
<img width="720" height="418" alt="1000139366" src="https://github.com/user-attachments/assets/2bb2d682-a744-480f-9eda-ec1b30139fec" />
Contributing
We welcome contributions!
Fork the repository
Create a new branch (git checkout -b feature-name)
Make your changes and commit (git commit -m "Add feature")
Push to the branch (git push origin feature-name)
Open a Pull Request
Please follow the Code of Conduct.
License
This project is licensed under the MIT License. See the LICENSE file for details.