What is mrnothing_recon?

MrNothing Recon is a Bash script built for bug bounty hunters and penetration testers who need to quickly map out a target's subdomains and exposed services. Given a domain name, it chains together a series of well known security tools to run passive subdomain discovery, check which subdomains are actually reachable, filter out false positives caused by wildcard DNS records, resolve every subdomain to its IP addresses, take screenshots of live websites, and scan for open ports and running services. The script relies on external command line tools that must already be installed and available on your system path, including subfinder for passive subdomain enumeration, nmap for port scanning, dig for DNS lookups, and optionally httpx, naabu, gowitness, and gobuster for faster alive checks, port scanning, screenshots, and active brute force subdomain guessing. Some of these, like naabu, may need elevated permissions to run its fast scanning mode. To use it, you clone the repository, make the script executable, and run it against a target domain, optionally supplying a wordlist file to enable active brute force subdomain discovery alongside the default passive scan. Results are written into a timestamped folder as a set of clearly named text files, covering raw subdomains, subdomains that responded over HTTP or HTTPS, resolved IP addresses, hosts excluded because they only resolved to wildcard DNS entries, screenshots, and separate port scan and service detection reports. Compared to an earlier version, this release adds wildcard DNS filtering, optional active brute forcing, parallel DNS resolution using multiple worker processes, timeouts so the scan does not hang indefinitely, and background screenshot capture with logging. The README includes a clear warning that this tool should only be pointed at targets you are authorized to test, since unauthorized scanning can violate laws and terms of service, and responsibility for how the tool is used rests entirely with the person running it.