> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# ExRecon: An advanced, TOR-routed Nmap automation framework for Kali Linux
- URL: https://darkwebinformer.com/exrecon-an-advanced-tor-routed-nmap-automation-framework-for-kali-linux/
- Published: 2025-07-01T18:01:29.000Z
- Updated: 2025-09-04T22:21:29.000Z
- Author: Dark Web Informer
- Tags: Tools, OSINT

---

**GitHub:** <https://github.com/ExRecon/exrecon>

---

# 🛡️ ExRecon - Ultimate TOR Nmap Automation

[](https://github.com/ExRecon/exrecon#%EF%B8%8F-exrecon---ultimate-tor-nmap-automation)

ExRecon is a stealth-oriented reconnaissance and scanning utility designed for **Kali Linux**. It automates advanced Nmap scans over the **TOR network**, validates anonymity, logs results in clean summaries, and allows optional log viewing — all while supporting multiple recon modes.

---

## ⚙️ Features

[](https://github.com/ExRecon/exrecon#%EF%B8%8F-features)

| Capability                | Description                                                                   |
| ------------------------- | ----------------------------------------------------------------------------- |
| **TOR integration**       | Routes all scans through TOR using proxychains4, and rotates exit nodes       |
| **Auto dependency check** | Detects and installs required tools like Nmap, Nikto, TOR, enscript, and more |
| **Modular scans**         | User selects multiple scan types simultaneously                               |
| **Service detection**     | Uses Nmap scripts and custom UA strings to detect services behind firewalls   |
| **Firewall evasion**      | Spoofs MAC address, modifies TTL, and optionally uses decoys                  |
| **Nikto web audit**       | Launches Nikto after detecting HTTP/HTTPS ports                               |
| **Live result viewer**    | Lets the user preview results using bat, less, or xdg-open                    |
| **Formatted reporting**   | Generates .txt and .pdf scan summaries with deltas vs previous scan           |
| **Version-aware decoys**  | Uses --decoy only if supported by the installed Nmap version                  |

---

## 🛠️ Dependencies

[](https://github.com/ExRecon/exrecon#%EF%B8%8F-dependencies)

ExRecon automatically checks and installs the following:

- `nmap`
- `proxychains4`
- `tor`
- `curl`
- `gpg`
- `tmux`
- `netcat-openbsd`
- `openssl`
- `enscript`
- `ghostscript`
- `pandoc`
- `nikto`

---

## 🔧 Installation

[](https://github.com/ExRecon/exrecon#-installation)chmod +x exrecon.sh  
./exrecon.sh

On first run, ExRecon will:

- Ensure all required tools are installed
- Patch `/etc/tor/torrc` to allow TOR control via `ControlPort`
- Rotate TOR circuits before each scan
- Create log storage directory `~/tor_scan_logs`

---

## 🚀 Usage

[](https://github.com/ExRecon/exrecon#-usage)./exrecon.sh

- Enter target domain or IP when prompted
- Select one or more scan modes (comma-separated)
- Wait for scan to finish and optionally view results

---

## 📁 Output Directory

[](https://github.com/ExRecon/exrecon#-output-directory)

```
~/tor_scan_logs/

```

- Raw scan logs: `scan_<timestamp>.*`
- Summary Report: `scan_summary_<timestamp>.txt`
- Printable PDF: `scan_summary_<timestamp>.pdf`
- Anomaly comparison: `scan_summary_<timestamp>.delta`

---

## 🔐 Notes

[](https://github.com/ExRecon/exrecon#-notes)

- 🔑 Run as root for full feature access (SYN scans, MAC spoofing)
- 🚦 TOR is validated before every scan; circuit is rotated
- 🌐 All traffic is routed via TOR using ProxyChains
- 🧹 Self-destruct functionality has been disabled in this version for report preservation

---

## ⚠️ Legal Warning

[](https://github.com/ExRecon/exrecon#%EF%B8%8F-legal-warning)

**ExRecon is intended strictly for educational and authorized penetration testing purposes.**

⚠️ Do **not** use this tool against systems/networks you do not own or lack **explicit written permission** to test. Misuse can result in criminal charges.

---

## 📜 License

[](https://github.com/ExRecon/exrecon#-license)

MIT License — see `LICENSE` file for details.

---

## 🧠 Author

[](https://github.com/ExRecon/exrecon#-author)

**ExRecon** developed by **ExRecon** as part of Offensive Security tooling — *for the Greater Good*. ❤️‍🔥

> "Master Kali Linux, Excel in Offensive Security"