Automated basic digital reconnaissance

InstaRecon is an automated basic digital reconnaissance tool, great for getting an initial footprint of your targets and discovering additional subdomains.

InstaRecon will do:

  • DNS lookups (A, PTR, MX, NS)
  • DNS lookups recursively on all hosts discovered
  • Whois (on domain and IP) lookups
  • Google dorks looking for subdomains and URLs
  • Shodan lookups
  • Reverse DNS lookups on entire CIDRs

…all printed nicely on your console or csv file.

InstaRecon will never scan a target directly. Information is retrieved from DNS/Whois servers, Google, and Shodan.

Simply install dependencies using pip. Tested on Ubuntu 14.04 and Kali Linux 1.1.0a.

pip install -r requirements.txt


git clone https://github.com/vergl4s/instarecon /opt/instarecon


cd /opt/instarecon
./instarecon.py -v -s <shodan_key> -o example.com.csv example.com
./instarecon.py -v -o example.com.csv example.com