reconax 0.2.0__tar.gz

reconax-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,58 @@
+name: Release to PyPI
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Test and build package
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build and test dependencies
+        run: python -m pip install --upgrade pip build ".[dev]"
+
+      - name: Run test suite
+        run: python -m pytest -q
+
+      - name: Build distributions
+        run: python -m build
+
+      - name: Check distributions
+        run: python -m pip install --upgrade twine && python -m twine check dist/*
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@v4
+        with:
+          name: python-distributions
+          path: dist/
+          if-no-files-found: error
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - name: Download distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: python-distributions
+          path: dist/
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

reconax-0.2.0/.gitignore

@@ -0,0 +1,38 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Virtual environments
+.venv/
+venv/
+env/
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+
+# Build artifacts
+build/
+dist/
+*.egg-info/
+
+# IDEs
+.vscode/
+.idea/
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# ReconAx generated reports
+report.json
+reports/
+
+# Local environment
+.env
+.env.*
+
+# Jupyter
+.ipynb_checkpoints/

reconax-0.2.0/CHANGELOG.md

@@ -0,0 +1,90 @@
+# Changelog
+
+All notable changes to ReconAx are documented in this file.
+
+The project follows a lightweight versioning approach based on semantic versioning principles.
+
+---
+
+## [0.2.0] — 2026-09-10
+
+### Added
+
+- Modular analysis architecture with a shared analysis context
+- TLS and certificate analysis
+- Passive technology detection
+- Sitemap analysis
+- CORS analysis
+- Content Security Policy (CSP) analysis
+- Subresource Integrity (SRI) analysis
+- `security.txt` analysis
+- Website metadata analysis
+- External resource analysis
+- Public endpoint discovery from page content
+- Passive attack-surface analysis
+- Website Hygiene Score
+- Expanded Python API with individual analysis functions
+- Expanded CLI with module-specific commands
+- JSON output support across analysis workflows
+- Redirect-chain information
+- Verdicts, flags, and explanations for analysis results
+
+### Improved
+
+- HTTP response handling and caching
+- Cookie parsing and security-attribute handling
+- Windows UTF-8 CLI compatibility
+- Python 3.14 compatibility
+- Error handling for real-world websites
+- Rich terminal output
+- Test coverage and module reliability
+- Documentation and installation guidance
+
+### Security
+
+- ReconAx remains passive by design
+- No port scanning, brute forcing, exploitation, credential attacks, or authentication bypass
+- Cookie values are not included in analysis results
+
+### Testing
+
+- Expanded automated test suite
+- Real-world website integration testing
+- Verified clean package installation from built artifacts
+
+---
+
+## [0.1.0] — 2026-09-09
+
+### Added
+
+- Initial ReconAx project structure
+- `ReconAx` Python API
+- URL normalization
+- HTTP GET client
+- HTTP redirect following
+- Response timing
+- HTTP response metadata
+- Structured `ReconReport`
+- Security-related HTTP header analysis
+- Cookie metadata extraction
+- HTML parsing
+- Internal/external link detection
+- Script extraction
+- Image extraction
+- `robots.txt` analysis
+- Basic DNS lookups
+- JSON report output
+- Rich terminal output
+- CLI commands and options
+- Initial automated test suite
+
+### Security
+
+- Cookie values are intentionally excluded from reports.
+- ReconAx performs lightweight public-information analysis.
+- No active exploitation or brute-force functionality is included.
+
+### Status
+
+Early development / Alpha.

reconax-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Chethan R
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

reconax-0.2.0/PKG-INFO

@@ -0,0 +1,324 @@
+Metadata-Version: 2.5
+Name: reconax
+Version: 0.2.0
+Summary: A lightweight, developer-friendly website analyzer for HTTP, HTML, headers, cookies, robots.txt, DNS, TLS, and passive web intelligence.
+Project-URL: Homepage, https://github.com/Chethan-ULTIMAX/reconax
+Project-URL: Repository, https://github.com/Chethan-ULTIMAX/reconax
+Project-URL: Issues, https://github.com/Chethan-ULTIMAX/reconax/issues
+Author: Chethan R
+License: MIT License
+        
+        Copyright (c) 2026 Chethan R
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Keywords: bug-bounty,cybersecurity,developer-tools,dns,html,http,reconnaissance,security-headers,tls,web-security,website-analyzer
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Education
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Internet
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.10
+Requires-Dist: beautifulsoup4>=4.12
+Requires-Dist: dnspython>=2.6
+Requires-Dist: httpx>=0.27
+Requires-Dist: lxml>=5.0
+Requires-Dist: rich>=13.7
+Requires-Dist: typer>=0.12
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: respx>=0.21; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# ⚡ ReconAx
+
+**A lightweight Python library and CLI for passive website analysis.**
+
+Analyze websites for HTTP information, security headers, cookies, TLS, DNS, technologies, metadata, public endpoints, resources, and more.
+
+**No API keys · Local analysis · Passive by design**
+
+⭐ Star the repo if you find ReconAx useful.
+
+---
+
+## ✨ Features
+
+- 🌐 HTTP & redirects
+- 🛡️ Security headers
+- 🍪 Cookie analysis
+- 📄 HTML & metadata
+- 🔐 TLS / certificate information
+- 🌍 DNS records
+- 🧠 Technology detection
+- 🔄 CORS & CSP
+- 🔒 SRI
+- 🤖 robots.txt & sitemap
+- 🔗 Public endpoints
+- 📦 External resources
+- 🎯 Passive attack surface
+- 📊 Website Hygiene Score
+- 📋 JSON output
+
+---
+
+## 📦 Installation
+
+### Windows
+
+```bash
+git clone https://github.com/Chethan-ULTIMAX/reconax.git
+cd reconax
+
+python -m venv .venv
+.venv\Scripts\activate
+
+python -m pip install --upgrade pip
+pip install -e .
+```
+
+### Linux / macOS
+
+```bash
+git clone https://github.com/Chethan-ULTIMAX/reconax.git
+cd reconax
+
+python3 -m venv .venv
+source .venv/bin/activate
+
+python -m pip install --upgrade pip
+pip install -e .
+```
+
+### PyPI
+
+```bash
+pip install reconax
+```
+
+---
+
+## 🚀 CLI
+
+Analyze a website:
+
+```bash
+reconax analyze example.com
+```
+
+JSON output:
+
+```bash
+reconax analyze example.com --json
+```
+
+Save JSON:
+
+```bash
+reconax analyze example.com --json -o report.json
+```
+
+Individual modules:
+
+```bash
+reconax headers example.com
+reconax cookies example.com
+reconax html example.com
+reconax dns example.com
+reconax tls example.com
+reconax tech example.com
+reconax csp example.com
+reconax cors example.com
+reconax endpoints example.com
+reconax attack-surface example.com
+reconax score example.com
+```
+
+See all commands:
+
+```bash
+reconax --help
+```
+
+---
+
+## 🐍 Python
+
+Run a complete analysis:
+
+```python
+import reconax
+
+report = reconax.analyze("https://example.com")
+
+print(report.http.status_code)
+print(report.tls.tls_version)
+print(report.score.score)
+```
+
+Use individual modules:
+
+```python
+import reconax
+
+headers = reconax.headers("https://example.com")
+
+print(headers.present)
+print(headers.missing)
+print(headers.verdict)
+```
+
+Inspect the complete report:
+
+```python
+report = reconax.analyze("https://github.com")
+
+print(report.http)
+print(report.headers)
+print(report.cookies)
+print(report.tls)
+print(report.tech)
+print(report.endpoints)
+print(report.attack_surface)
+print(report.score)
+```
+
+---
+
+## 📊 Website Hygiene Score
+
+ReconAx provides a simple **0–100 Website Hygiene Score** based on passive configuration checks.
+
+```python
+report = reconax.analyze("https://example.com")
+
+print(report.score.score)
+print(report.score.grade)
+```
+
+The score is **not a vulnerability score** and does not guarantee that a website is secure.
+
+---
+
+## 🛡️ Passive by Design
+
+ReconAx focuses on lightweight analysis of publicly accessible website information.
+
+It does **not** perform:
+
+- brute forcing
+- exploitation
+- port scanning
+- credential attacks
+- authentication bypass
+- aggressive crawling
+
+Only analyze systems you own or have permission to test.
+
+---
+
+## 🖥️ GUI
+
+A graphical interface is planned for a future version.
+
+The current release focuses on the **Python API + CLI**.
+
+---
+
+## 🧪 Development
+
+Install the development version:
+
+```bash
+pip install -e ".[dev]"
+```
+
+Run tests:
+
+```bash
+python -m pytest -q
+```
+
+---
+
+## 🛠️ Common Issues
+
+### `reconax` is not recognized
+
+Try:
+
+```bash
+python -m reconax.cli --help
+```
+
+If this works, your Python Scripts directory may not be in `PATH`.
+
+### `pytest` is not recognized
+
+Use:
+
+```bash
+python -m pytest
+```
+
+### Windows Unicode / encoding errors
+
+Try:
+
+```bash
+chcp 65001
+```
+
+ReconAx configures CLI output for UTF-8 on Windows.
+
+### SSL errors
+
+If necessary, certificate verification can be disabled through the Python API:
+
+```python
+reconax.analyze("https://example.com", verify_ssl=False)
+```
+
+Use this only when you understand the implications.
+
+---
+
+## 📄 License
+
+MIT License.
+
+---
+
+## ⭐ Support ReconAx
+
+If ReconAx is useful to you:
+
+**⭐ Star it · 🐛 Report bugs · 💡 Suggest ideas**
+
+**ReconAx — one URL, one clear report. ⚡**