# robotshell/magicRecon

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

Repository: https://github.com/robotshell/magicRecon
Canonical: https://ross.abutalabs.com/products/magicrecon
Language: Shell
License: GPL-3.0
License Family: copyleft
Topics: subdomain, bug, bugbounty-tool, bugbounty, vulnerability-scanners, scanner, tool, infosec, bugbountytricks, bash-script, subdomains-enumeration, xss-vulnerability, sql-injection, nuclei
Last push: 2024-07-23T10:51:49+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2478, "days_push": 771, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1052, forks 162 (observed 2026-08-28T04:03:23.297544+00:00)

## What it is
MagicRecon is a Bash shell script that automates reconnaissance and vulnerability scanning of target domains, including subdomain enumeration, port scanning, and checks for XSS, SQLi, subdomain takeover, and other common issues. It organizes results into directories in multiple formats, making it popular for bug bounty workflows.

## Use cases
- automate recon on a target domain for a bug bounty
- enumerate subdomains and check which are alive
- scan a domain for XSS and SQL injection vulnerabilities
- find open ports and directories on a web target
- check for subdomain takeover and CORS misconfigurations
- collect whois, DNS, and certificate info for subdomains
- run recurring Nuclei vulnerability scans and save organized reports

## When to choose
- you want an all-in-one automated recon and vulnerability scanning script for bug bounty
- you need organized, multi-format output from many recon tools in one run
- you work on Linux and are comfortable with Bash-based tooling

## When to avoid
- you need a maintained library or API to integrate into your own code
- you require a GUI or Windows-native tool
- you need guaranteed accuracy — automated vulnerability checks produce false positives that require manual verification

## Facets
- artifact type: cli-tool
- maturity: active
- function: vulnerability-scanning, web-scraping, security, osint, cli
- domain: security, penetration-testing, osint
- platform: cli
- tags: recon, bugbounty, subdomain-enumeration, nuclei, bash-script, xss, sql-injection, subdomain-takeover, command-line, linux

## Member repositories
- robotshell/magicRecon (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:23.297544+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:59:45.455551+00:00, confidence not recorded.
  - readme: https://github.com/robotshell/magicRecon (fetched 2026-08-28T04:03:23.297544+00:00, sha d740c33c0802)
- Data as of 2026-08-30T08:39:29.467469+00:00.