Releases: hackThacker/recontool
Releases · hackThacker/recontool
Release list
ReconTool v1.1.0 - Production-Quality Validation & Checksums
Release Notes - ReconTool v1.1.0
New Features & Improvements
Production-Quality Automated Asset Validation
- Implemented in-memory diagnostic checks for compiled executable binary headers:
- Linux: Validates ELF header machine type (EM_X86_64, EM_AARCH64).
- Windows: Validates PE header machine type (AMD64, ARM64).
- macOS: Validates Mach-O header CPU type (AMD64, ARM64).
- Added archive entry checks verifying that zip packages contain only the expected binary file with correct permissions.
- Added Debian package structure validations verifying members (
debian-binary,control.tar.gz,data.tar.gz). - Any build validation error aborts the release pipeline immediately.
Standardized Release Artifacts
- Packaging Format: Releases are distributed in standardized
.zip(withchmod +xexecutable permissions on Unix targets) and.debDebian package formats. - Source Code Archive: Included a gzipped source code tarball
recontool_1.1.0_source.tar.gzcontaining only necessary Go sources and metadata, excluding build directories. - Checksum Verification: Re-aligned
recontool_1.1.0_checksums.txtformatting to match standard<hash> <filename>specifications, providing direct compatibility withsha256sum -c.
ReconTool v1.0.9 - Professional Artifacts & Normalization
Release Notes - ReconTool v1.0.9
New Features & Improvements
Robust Domain Normalization & Chaos Matching
- Replaced custom split-based domain parsing with standard, secure public suffix analysis using
golang.org/x/net/publicsuffix. - Target domains are normalized case-insensitively and parsed to extract the registerable base domain (e.g.,
example.com->example,sub.example.co.uk->example). - Subdomains and multiple TLD parts are correctly stripped without affecting the base domain part.
Resilient Pipeline Execution
- Wayback CDX and ProjectDiscovery Chaos lookup stages now execute completely independently.
- HTTP 429 (Too Many Requests) errors and other network failures in one stage do not affect or terminate subsequent stages.
- Output files are consistently created as empty files on query failure to guarantee directory structure predictability.
Safe ZIP Extraction & Merge
- The Chaos dataset downloader now extracts
.txtlists by merging them with any existing subdomains, removing duplicates, and writing them safely without overwriting or corrupting prior data.
Concise Standardized Logging
- Console output has been cleaned up. Diagnostic messages now follow a strict prefix format:
[STEP]for pipeline phases.[SUCCESS]for successful completions.[INFO]for informational logs.[WARNING]for handled non-fatal errors (e.g., HTTP 429).[ERR]for fatal errors.
Release Artifacts & Naming
- Added automated cross-compilation pipeline script producing standard naming format:
recontool_<version>_<os>_<architecture>.zip - Includes SHA256 checksum file:
recontool_<version>_checksums.txt
ReconTool v1.0.8 - Chaos Dataset Integration
ReconTool v1.0.8 - Chaos Dataset Integration
- Chaos Dataset Downloading and Extraction: ReconTool now automatically checks the ProjectDiscovery Chaos dataset index (\index.json) for the target domain (case-insensitively and stripping TLDs like .com\ or ccTLDs like .co.uk). If a matched ZIP exists, it downloads it and extracts its files directly into the target's output directory, merging them with any existing files.
- Independent Execution: The Wayback CDX stage and the Chaos dataset stage run completely independently of each other. Failure or 429 errors in one will not prevent the other from completing.
- Concise Console Logging: Output has been streamlined to only print high-level step, success, info, and warning logs to keep the console clean and scannable.
ReconTool v1.0.7 - Wayback Output Guarantee
ReconTool v1.0.7 - Wayback Output Guarantee
- Enforced File Creation: Every single Wayback query (\main, \wildcard, \specific, \sensitive) will ALWAYS create its corresponding output file on disk (\wayback_main.txt, \wayback_wildcard.txt, \wayback_specific.txt, \wayback_sensitive.txt), regardless of whether the query succeeds, returns zero URLs, or fails (due to timeout, HTTP 429, DNS errors, or network errors). Failed query files are simply generated as empty files.
- Improved Code DRYness: Refactored the concurrent Wayback CDX querying logic using a single unified query helper, reducing code size.
ReconTool v1.0.6 - Wayback CDX Resilience
ReconTool v1.0.6 - Wayback CDX Resilience
- Wayback CDX Resilience: Every successful URL returned by any query is always preserved and written to disk, even if one or more CDX requests fail. The program never discards successful results because another query failed.
- Independent Files: Each query saves its own output file independently (\wayback_main.txt, \wayback_wildcard.txt, \wayback_specific.txt, \wayback_sensitive.txt). If a query returns zero results, an empty output file is created for consistency.
- User Agent Randomization: Integrated a pool of 50+ common user agents to prevent Wayback CDX HTTP 429 / 403 / 503 blockages.
ReconTool v1.0.5 - Symlink Updates
ReconTool v1.0.5
- Symlink Resolution: The self-updater now resolves symlinks to locate and replace the real target binary path correctly on Linux/WSL/macOS (e.g. when copying to /usr/local/bin or using system shortcuts).
- Correct Asset Matching: Fixed automatic binary replacement for all OS architectures by matching release files securely.
ReconTool v1.0.4 - Production Self Update System
ReconTool v1.0.4 - Production Self Update System
- Production-Ready Self-Update System: Complete rewrite of the self-update logic using only standard library Go.
- Binary Replacement: Safely downloads the matching precompiled binary asset from GitHub releases for the user's OS and architecture, verified, and overwrites the running executable.
- Windows Support: Uses the .old renaming trick to replacement-update the locked running executable on Windows safely.
- Permission Check: Gracefully handles insufficient write permissions (e.g., in /usr/bin or standard system path directories), checks for errors, and logs administrative/sudo remediation guidelines.
- Semver Parsing: Robust semantic version checking.
ReconTool v1.0.3 - Self Update Capability
ReconTool v1.0.3 - Self Update Capability
- Self Update: Running
econtool -u\ /
econtool --update\ will now check for updates, show the latest version, and automatically run \go install -v github.com/hackthacker/recontool@latest\ if a newer version is available on GitHub.
ReconTool v1.0.2 - Performance Upgrade
ReconTool v1.0.2 - Performance Upgrade
- Performance: Execute all four Wayback CDX API requests concurrently using goroutines and \sync.WaitGroup. This reduces the total Wayback search duration from the sum of all requests to the duration of the slowest request.
- Efficiency: Reuse a single global \http.Client\ instead of creating a new one for each request.
- Memory Optimization: Stream Wayback CDX response lines directly using \�ufio.Scanner\ on
esp.Body\ to avoid loading entire multi-megabyte CDX responses into memory.
ReconTool v1.0.0 - Initial Release
ReconTool v1.0.0
Install
\\�ash
go install -v github.com/hackthacker/recontool@latest
\\
What's New
- Full automated recon pipeline: Wayback CDX → subfinder → chaos → httpx → uncover
- All subfinder flags exposed via
econtool subfinder\ - All httpx flags exposed via
econtool httpx\ - All chaos flags exposed via
econtool chaos\ - All uncover flags (15+ engines) via
econtool uncover\ - HTTP response filtering by status family (1xx/2xx/3xx/4xx/5xx)
- 4 Wayback CDX queries per domain
- Version, help, and update-check flags