Skip to content

Recon 0.2.1

Choose a tag to compare

@0xfelixli 0xfelixli released this 09 Oct 12:57

macOS · Apple Silicon (arm64) · English / 简体中文

Continue your work

  • Recon restores the last page used in each project, with focus on the visible page. Repeater drafts survive restart, and reopened tabs keep their target, wrapping and response history.
  • Dashboard now shows project status, prioritized pending findings and recent work that opens the original record. Running tasks appear only when active; event history is expandable.

Work with agents

  • MCP calls show arguments, progress, duration and full results directly in MCP. HTTP details use the same Request / Response components as Repeater and history.
  • Select an HTTP exchange to save project context with notes. Agents can read the selected context through MCP tools and resources.
  • Register shell tools with usage instructions and typed parameters; enablement and defaults belong to each project. manage_tool provides list, add, update and disable.
  • MCP now exposes 35 built-in tools. Encoding and decoding use encode_text / decode_text with a format; list tools support pagination. Resources and prompts are available to clients.

Interface and reliability

  • Chinese and English interface options, consistent GPUI Kit controls, improved Chinese input and caret positioning, compact context menus and clearer action buttons.
  • Readable Markdown previews, severity text labels and separate list/detail navigation in narrow Findings and MCP windows.
  • Scope is managed in Target; Settings opens on the main window's display. Intruder is hidden from navigation. New blank tabs no longer report an invalid URL before a target is entered.
  • Copy actions live in context menus. Tool editing has a visible Close action and Save / Discard / Cancel for drafts.
  • Failed saves preserve work for retry; damaged sessions keep recovery copies. History refreshes are throttled under traffic.

Connection and approval changes

  • Sending and proxy control default to Allow; Scope enforcement and request limits are optional. Existing configured preferences are preserved.
  • Under Ask, new or changed shell commands require review; metadata, defaults and availability changes do not prompt again. Exact approved commands can run again in that project.
  • MCP remains bound to loopback with bearer-token authentication and Origin checks. Proxy remains local by default; LAN access is an explicit setting.
  • Debug builds use separate data directories and default ports 18080 / 19877. The release app retains Proxy 8080 / MCP 9877.

Install

Download Recon-macos.zip, unzip it and move Recon.app to /Applications. The app is ad-hoc signed and not notarized. First launch: Right-click → Open → Open; if macOS still blocks it, run xattr -dr com.apple.quarantine /Applications/Recon.app.

Validation

992 tests passed; six optional network/real-clock checks were not run. The arm64 app passed code-signature verification. Interface snapshots use synthetic sample data.

SHA-256 for both ZIP files: b7efc3cdf98eec1aa3d986d12367e1a85a89a93166b898b40a009e2e383c8df3. SHA256SUMS.txt is included for verification.