International Journal For Multidisciplinary Research

E-ISSN: 2582-2160   •   Impact Factor: 9.24

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Call for Paper Volume 8, Issue 4 (July-August 2026) Submit your research before last 3 days of August to publish your research paper in the issue of July-August.
Submit Research Paper Join as a Reviewer

Plagiarism is checked by the leading plagiarism checker TurnItIn

Call for Paper

Volume 8 Issue 4
July-August 2026

Submit your research paper

Indexing Partners
Academia Advanced Sciences Index Bielefeld Academic Search Engine CiteSeer DRJI Google Scholar Independent Search Engine & Directory Network ISI (International Scientific Indexing) Issuu Mendeley Research Networks
RefSeek ResearcherId - Thomson Reuters ResearchGate Scirus Scribd Semantic Scholar UTeM - Universiti Teknikal Malaysia Melaka Wiki for Call for Papers WorldCat Zenodo

MrRecon: An Automated Framework for Domain Reconnaissance and Vulnerability Assessment Using Open-Source Security Tools

Author(s) Mr. Akash Suryakant Shinde, Dr. Manisha Bharati
Country India
Abstract Abstract—Modern offensive cybersecurity paradigms, including penetration testing, continuous attacksurface management (CASM), and bug bounty hunting, rely heavily on the reconnaissance phase to chart anorganization's external digital footprint. While numerous high-performance, open-source security tools
(OSSTs) exist for discrete tasks like subdomain discovery, active probing, and vulnerability fuzzing, theirmanual orchestration introduces significant operational friction. Security practitioners frequently strugglewith fragmented data schemas, manual pipeline management, high execution latencies, and inconsistent
reporting mechanisms. To address these inefficiencies, this paper introduces MrRecon, an automated,modular domain reconnaissance and vulnerability assessment framework. Built as a lightweight shell-scriptorchestration layer, MrRecon unifies industry-standard utilities—including Subfinder, OWASP Amass,
Assetfinder, Httpx, FFUF, DNSx, Nuclei, SQLmap, and XSStrike—into a cohesive, data-pipelinedarchitecture. The framework automates the end-to-end lifecycle: passive/active asset discovery, live hostvalidation via technology fingerprinting, recursive directory/endpoint fuzzing, and template-driven
vulnerability scanning. Experimental evaluation within controlled, authorized testing scopes indicates thatMrRecon reduces the time required for comprehensive reconnaissance by up to 76.6% compared to manualtool chaining, while concurrently enhancing asset discovery yields by over 70.8% via intelligent datadeduplication and structural normalization. The framework outputs normalized, deterministic JSON andMarkdown reports optimized for immediate triage and vulnerability submission workflows.
Keywords Reconnaissance, Attack Surface Management, Automation Framework, Bug Bounty, Penetration Testing, Vulnerability Assessment, Pipeline Chaining
Field Computer > Network / Security
Published In Volume 8, Issue 3, May-June 2026
Published On 2026-06-11
DOI https://doi.org/10.36948/ijfmr.2026.v08i03.81128
View / Download PDF File

Share this



E-ISSN 2582-2160
CrossRef

CrossRef DOI prefix of IJFMR is 10.36948/ijfmr

Downloads
Research Paper Format Copyright Permission Form and Undertaking Form

All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.

CC-BY-SA Open Access

About IJFMR
Fees & Payment
Current Issue
Publication Archive 		Submit Research Paper
Track Submission Status
Publication Guidelines
Publication Ethics
Peer Review & Plagiarism 		Join as a Reviewer
Editors & Reviewers
Reviewer Referral Program
Get Reviewer Membership Certi. 		Website/Journal Policies
Usage Policy
Content Policies
Privacy Policy
Contact Us +91-9687-828-838 editor@ijfmr.com
Powered by Sky Research Publication and Journals