scripts/bash/recon/config/default.conf at main · tatanus/scripts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
#!/usr/bin/env bash

###############################################################################
# Default Configuration for External Recon Suite
###############################################################################

#===============================================================================
# Task Control
# Set to "true" to enable, "false" to disable
#===============================================================================
TASK_ENABLED_00_VALIDATE=true
TASK_ENABLED_01_OSINT=true
TASK_ENABLED_02_NMAP=true
TASK_ENABLED_03_HTTP_SCAN=true
TASK_ENABLED_04_TESTSSL=true

#===============================================================================
# Nmap Configuration
#===============================================================================

# Enable full TCP port scan (1-65535)
# WARNING: This can take a very long time
NMAP_FULL_TCP_SCAN=false

# Enable UDP scanning on common ports
NMAP_UDP_SCAN=false

# Enable NSE vulnerability scanning
NMAP_VULN_SCAN=false

#===============================================================================
# HTTP Scanning Configuration
#===============================================================================

# HTTPx thread count (higher = faster but more aggressive)
HTTPX_THREADS=50

# HTTPx timeout (seconds)
HTTPX_TIMEOUT=10

# HTTPx retries
HTTPX_RETRIES=2

#===============================================================================
# Nuclei Configuration
#===============================================================================

# Nuclei rate limit (requests per second)
NUCLEI_RATE_LIMIT=150

# Nuclei bulk size
NUCLEI_BULK_SIZE=50

# Nuclei timeout (seconds)
NUCLEI_TIMEOUT=10

# Nuclei retries
NUCLEI_RETRIES=2

# Nuclei severity levels to report
NUCLEI_SEVERITY="critical,high,medium,low,info"

#===============================================================================
# TestSSL Configuration
#===============================================================================

# TestSSL timeout per target (seconds)
TESTSSL_TIMEOUT=600

# TestSSL parallel mode (faster but more aggressive)
TESTSSL_PARALLEL=true

# TestSSL severity threshold
TESTSSL_SEVERITY="MEDIUM"

#===============================================================================
# General Configuration
#===============================================================================

# Enable parallel task execution (experimental)
RECON_PARALLEL=false

# Enable verbose output
RECON_VERBOSE=false

# Dry run mode (don't actually execute commands)
RECON_DRY_RUN=false

# Log level (debug, info, warn, error)
LOG_LEVEL=info

#===============================================================================
# Tool-Specific Options
#===============================================================================

# Subfinder configuration
SUBFINDER_RECURSIVE=true
SUBFINDER_ALL=true

# DNSx configuration
DNSX_RETRY=2
DNSX_TIMEOUT=10

# ASNMap configuration
ASNMAP_VERBOSE=true

#===============================================================================
# Output Configuration
#===============================================================================

# Keep intermediate files
KEEP_INTERMEDIATE_FILES=true

# Compress old results
COMPRESS_OLD_RESULTS=false

# Results retention (days, 0 = keep forever)
RESULTS_RETENTION_DAYS=30