ReconPulse is a modular passive reconnaissance CLI toolkit designed to gather domain intelligence safely and ethically. It performs DNS resolution, HTTP fingerprinting, SSL certificate lifecycle analysis, Certificate Transparency lookup, passive subdomain enumeration, WHOIS metadata extraction, and DNS record enumeration — all with structured reporting support.
Built for educational purposes and authorized security testing.
- DNS Resolution & IP Identification
- TCP Service Validation (Port 443)
- HTTP Header Fingerprinting
- Server Technology Detection
- SSL Certificate Inspection (Issuer, Expiry, Validity)
- Certificate Transparency Analysis (crt.sh)
- Passive Subdomain Enumeration
- WHOIS Metadata Extraction
- DNS Record Enumeration (A, AAAA, MX, NS, TXT, CNAME)
- Asynchronous Concurrent Execution
- Markdown Report Generation
- JSON Export Option
- Structured Logging System
git clone https://github.com/SYCO7/ReconPulse.git
cd ReconPulse
python -m venv .venv
.venv\Scripts\activate
pip install -r requirements.txtgit clone https://github.com/SYCO7/ReconPulse.git
cd ReconPulse
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txtpython -m reconpulse.main --target example.comPerforms:
- DNS resolution
- TCP validation
- HTTP header collection
- SSL certificate inspection
python -m reconpulse.main --target example.com --jsonGenerates:
- Markdown report
- JSON structured report
python -m reconpulse.main --target example.com --subsUses crt.sh to gather passive subdomains.
python -m reconpulse.main --target example.com --ctExtracts:
- Certificate count
- First seen
- Last observed
python -m reconpulse.main --target example.com --whois --dnsExtracts:
- Registrar
- Creation date
- Expiry date
- Name servers
- DNS A, MX, NS, TXT, CNAME records
python -m reconpulse.main --target example.com --subs --ct --whois --dns --jsonRuns complete passive intelligence collection and exports structured reports.
Reports are saved in:
/reports
Generated files:
example.com_recon_<timestamp>.mdexample.com_recon_<timestamp>.json
Logs are saved in:
/logs/reconpulse.log
ReconPulse uses:
socket→ DNS resolution & TCP connectivityssl→ SSL certificate extractionrequests/aiohttp→ HTTP & passive data retrievalcrt.sh API→ Certificate Transparency & subdomain intelligencepython-whois→ WHOIS metadata parsingdnspython→ DNS record enumerationasyncio→ Concurrent execution for performance
All reconnaissance techniques are passive and non-intrusive.
ReconPulse can assist with:
- Initial domain reconnaissance during authorized engagements
- Passive information gathering before web testing
- SSL lifecycle monitoring
- DNS infrastructure analysis
- Bug bounty preparation research
- Red team reconnaissance labs
- Cybersecurity learning environments
This tool is designed for defensive learning and authorized assessments only.
ReconPulse/
│
├── reconpulse/
│ ├── main.py
│ ├── scanner.py
│ ├── reporter.py
│ ├── utils.py
│
├── reports/
├── logs/
├── requirements.txt
└── README.md
ReconPulse is intended for educational purposes and authorized security testing only.
Do not use this tool against systems without explicit permission. Unauthorized reconnaissance may violate laws or service terms.
The author assumes no liability for misuse.
- WHOIS caching system
- DNSSEC validation checks
- Rate limiting support
- Config file support
- Passive OSINT module expansion
Tanmoy Mondal
GitHub: https://github.com/SYCO7
LinkedIn: https://www.linkedin.com/in/tanmoy-mondal-11070334b/
ReconPulse v4
Passive Domain Intelligence Framework