Orchestrate. Enumerate. Dominate. A unified intelligence platform that transforms 100+ fragmented security tools into a single automated reconnaissance machine.

---

🔍 What Is ReconPortal?

ReconPortal v3.1 is a professional-grade bug bounty and OSINT orchestration platform. It unifies fragmented security tooling into a single intelligent interface — with visual relationship graphs, live surveillance streaming, identity management, and automated vulnerability workflows.

Built for ethical security researchers, bug bounty hunters, penetration testers, and red teams who need nation-state grade tooling with professional UX.

[Target Domain / Username / IP]
           │
           ▼
┌──────────────────────────────────────────────────────┐
│               ReconPortal Intelligence Hub            │
│                                                      │
│  🕸️  Graph Engine     →  Visualize relationships    │
│  👁️  Live Surveillance →  Headless browser streaming │
│  🎭  Identity Vault   →  Sock puppet management     │
│  🛠️  Tool Orchestrator →  100+ unified tool runners │
│  📊  Results Aggregator→  Unified findings view     │
└──────────────────────────────────────────────────────┘
           │
           ▼
[Unified Intelligence Report]

---

✨ Feature Suite

🕸️ Interactive Intelligence Graph (Palantir View)

Visualize complex recon data in a dynamic force-simulation node graph. Discover hidden relationships between usernames, IPs, social accounts, and domains through interactive physics-based exploration.

👁️ Live Surveillance & Identity Warmer

Real-time headless browser streaming via WebSockets. Watch automation agents navigate targets live. Built-in Auto-Warmer simulates human behavior to maintain high platform trust scores.

🎭 Sock Puppet Vault

Manage and rotate hundreds of operational identities. Built-in cookie injection engine — bypass 2FA and login screens by injecting raw session payloads directly into the automation engine.

🛠️ Universal Tool Orchestrator — 100+ Tools

Category	Tools
OSINT	Sherlock, Maigret, Instaloader, SpiderFoot, Recon-ng
Subdomain Recon	Subfinder, Amass, Assetfinder, Cero, Httpx
Vulnerability	Nuclei, Dalfox, SQLMap, Commix, XSStrike
Web Crawling	Katana, Crawley, LinkFinder, SecretFinder
Network	Nmap, Masscan, Shodan, Censys integrations
Password	Hashcat, John, custom wordlist pipelines

---

⚡ Quick Start

Prerequisites

Python 3.10+  •  Node.js 18+  •  Go 1.21+ (recommended)  •  Git  •  Docker (optional)

1 — Clone & Configure

git clone https://github.com/gnonymous1/ReconPortal.git
cd ReconPortal

cp .env.example .env
# Edit .env with your credentials (see variable reference below)

2 — Install Everything (One Command)

# Windows
Start Project.bat   →  Select [8] Install / Check Dependencies

# Linux/macOS
python3 install_all_tools.py

This automatically:

• Clones 100+ security tools
• Installs all Python/Node packages
• Sets up Playwright headless engine

3 — Launch

# Windows
Start Project.bat   →  Select [1] Start All Services

# Docker
docker-compose up -d

# Manual
python3 start_orchestrator.py

Dashboard: http://localhost:3005/dashboard
API Docs:  http://localhost:8000/docs

Environment Variables

cp .env.example .env

Variable	Required	Description
SECRET_KEY	✅	Django/FastAPI secret key
JWT_SECRET	✅	JWT token signing key
DB_PASS	✅	PostgreSQL password
MINIO_USER	✅	MinIO object storage user
MINIO_PASS	✅	MinIO object storage password
DOMAIN	—	Deployment domain (default: localhost)
NEXT_PUBLIC_API_URL	—	Frontend API base URL

🔐 All secrets via environment variables only. Never commit .env to source control.

---

🏗️ Technology Stack

Layer	Technology
Frontend	Next.js 14 · TailwindCSS · Framer Motion · React-Force-Graph
Backend	FastAPI (Python) · Uvicorn · Playwright
Real-time	WebSockets — live surveillance streaming
Storage	PostgreSQL · Redis · MinIO (object store)
Containers	Docker Compose — full stack orchestration
Automation	100+ tool wrappers · Python subprocess orchestration

---

📁 Project Structure

ReconPortal/
│
├── 🖥️   frontend/              Next.js 14 intelligence dashboard
├── ⚙️   services/              FastAPI microservices
│   ├── recon/                 Subdomain & asset enumeration
│   ├── osint/                 Identity & social intelligence
│   ├── vuln/                  Vulnerability scanning pipeline
│   └── surveillance/         Headless browser streaming
├── 🗃️   database/             PostgreSQL schema & migrations
├── 🔧  scripts/              Tool installation & orchestration
├── 🌐  extension/            Browser extension (optional)
├── 📦  docker-compose.yml    Full stack container orchestration
├── 🔐  .env.example          Environment variable template
└── 📚  Project setup.md      Detailed setup guide

---

🚀 Docker Deployment

# Full stack (recommended for production)
docker-compose up -d

# Development mode (hot-reload)
docker-compose -f docker-compose.dev.yml up

# View logs
docker-compose logs -f

---

🗺️ Roadmap

• AI-powered target prioritization (GPT/Gemini integration)
• Automated report generation (PDF + HTML)
• Team collaboration — multi-user workspaces
• Cloud scan distribution — distributed recon agents
• CVE correlation engine
• Slack/Discord webhook notifications

---

⚖️ Legal Disclaimer

ReconPortal is for authorized security research and bug bounty hunting only.

• Only scan targets for which you have explicit written permission
• Comply with all applicable laws and bug bounty program rules
• The developers assume zero liability for misuse or damage
• Always verify scope before running any automated tool

---

🤝 Contributing

git checkout -b feature/your-feature
# Make changes + test
git commit -m "feat: your feature"
# Open a Pull Request

See CONTRIBUTING.md for full guidelines. Issues tagged good first issue are great starting points.

---

🐛 Report Bug • ✨ Request Feature • 💬 Discuss

ReconPortal — Orchestrating the Attack Surface.