Skip to content

Recons101x v1.1.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Oct 04:43
· 1 commit to main since this release
v1.1.0
6cd7030
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Recons101x 1.1.0 improves scan safety, reliability, and visibility into long-running results while keeping the existing CLI and output formats.

What changed

  • Keep checks within the requested domain. Hostnames returned by Shodan CTL are validated against the requested domain before DNS resolution or active probes. HTTP checks no longer follow redirects, so a response cannot silently move a probe to a different hostname.
  • Make network retries more useful. Only transient failures are retried. The scanner honors Retry-After (up to 60 seconds) and uses bounded jittered backoff; permanent HTTP 4xx errors fail without wasting retry time.
  • Get certificate details faster with a clear limit. Certificate detail requests run concurrently, controlled by --certificate-workers (default: 4).
  • See where scan time goes. JSON now records query time, completion state, errors, and timings for hostname lookup, checks, certificate enrichment, and total runtime. --progress also reports CTL index requests and elapsed time.
  • Keep useful results when part of a scan fails. JSON includes completed domains and partial results with explicit errors. The command exits nonzero if any domain is incomplete, so automation can detect the failure without losing collected data.
  • Protect saved output. Output files are replaced atomically after serialization succeeds, preventing a failed write from leaving a truncated result.
  • Choose Python explicitly in shell launchers. Set RECONS101X_PYTHON to select the interpreter used by scan.sh or scan.ps1.

Example

./scan.sh example.com --live --certificates \
  --certificate-workers 4 --max-hosts 50 --max-time 60 \
  --progress --format json --output results.json

Use --max-hosts and --max-time to keep active checks bounded. Certificate enrichment is optional; omit --certificates if you only need hostname reachability.

Verification

The release passed the repository CI matrix on Linux, Windows, and macOS, including Python 3.10–3.14, the Git Bash and PowerShell launchers, and static security analysis. GitHub publishes the wheel, source archive, and SHA256SUMS below.

Assets 5
Loading