// flagship project
Main Project
The primary tool I built — everything else led to this.
crecon
★ Flagship
Tool
v0.1.0
⚡ Automated recon toolkit — chains Nmap, CVE lookup, dir brute-force, web crawl, SSH testing, and Nuclei into one command. AI builds complete attack chains from all findings.
One command. Full recon. Five tools chained automatically based on what the previous step finds. Port 80 open → auto-triggers directory brute-forcing, web crawl, Nuclei CVE validation. Port 22 open → auto-tests default SSH credentials. NVD CVE lookup runs automatically on every detected service. Then feeds everything to AI for actual attack paths with exact commands and payloads.
Supports 5 AI providers (GitHub Models — DeepSeek-R1, Groq, Gemini, OpenAI, Anthropic) with automatic fallback if one runs out of credits. Installable as a real Kali Linux command.
PythonNmapNuclei
paramikoBeautifulSoupdnspython
NVD APIDeepSeek-R1subprocess
ThreadPoolExecutorsocket
auto mode — full chain: Nmap → CVE lookup → SSH test → dir enum → web recon → Nuclei
crecon --help — banner + subcommands
dir enum + recon — .htpasswd, .svn, Apache detected
AI analysis — CVE-2021-44224 (CVSS 8.2) — complete attack chain with exact commands
