# Web Recon

> Passive recon tool using crt.sh and the Wayback Machine archives. Extract subdomains, archived URLs, paths, and sensA passive reconnaissance tool that collects subdomains from crt.sh and crawls archived URLsitive file types.

Canonical page: [https://chrome-stats.com/d/web-recon](https://chrome-stats.com/d/web-recon)

## Overview

- **ID:** `web-recon`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Nitin Saini
- **Category:** web-development,privacy-security,search-tools
- **Daily users:** 10
- **Version:** 1.0
- **Last updated:** 2025-12-08
- **First published:** 2025-12-05
- **Size:** 148 KB
- **Data as of:** 2026-09-07
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/web-recon/)

## Description

Recon: SainiON is a passive information-gathering tool designed for security researchers, analysts, and bug bounty professionals.
This extension does not interact with live targets. Instead, it retrieves publicly archived data from trusted open sources, making it safe for compliance-friendly reconnaissance.

Features

Subdomain Enumeration (<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/6d2f6901a05aceb5ecd44b627c6c02b31e02071568a0acb1f3fb3b64a93431a4/http%3A//crt.sh" rel="nofollow">crt.sh</a>)
Fetches Certificate Transparency logs and extracts unique common names to help identify potential subdomains.

Archived URL Discovery (Wayback Machine)
Opens one-click queries for:
• All subdomains
• Main domain
• Specific paths
• Sensitive file extensions (archived only)

Passive-Only Workflow
Every request is sent only to public data providers like <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/6d2f6901a05aceb5ecd44b627c6c02b31e02071568a0acb1f3fb3b64a93431a4/http%3A//crt.sh" rel="nofollow">crt.sh</a> and <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/a65ec8c7427838a3ee2cd85f79e9547b61dd9aa1c60d0dab266f2ae8144382f8/http%3A//archive.org" rel="nofollow">archive.org</a>.
No interaction with the target server takes place.

Modern Hacker-Style UI
Clean neon interface, equal button layout, and lightweight performance. Includes top-left branding and quick links.

Who It’s For

Bug bounty researchers

SOC teams

Security analysts

Pentesters performing passive reconnaissance

Anyone exploring historical URL archives

## Rankings

- #33,823 — Overall
- #156 — reason

## Permissions and access

### Permissions

- `activeTab`
- `storage`
- `<all_urls>`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [ReconLens - Passive Security Scanner](https://chrome-stats.com/d/reconlens) — 1 users
- [recon - IP, Network & Malware tools](https://chrome-stats.com/d/recon-ip-network-malware-tools) — 64 users, 3.45 / 5
- [JS Recon & Secret Scanner](https://chrome-stats.com/d/js-recon-secret-scanner) — 5 users
- [Subdomain Finder](https://chrome-stats.com/d/subdomain-finder) — 112 users, 3.00 / 5
- [JS Recon Buddy](https://chrome-stats.com/d/js-recon-buddy) — 165 users, 5.00 / 5
- [RF5-Recon](https://chrome-stats.com/d/rf5-recon) — 4 users, 5.00 / 5
- [ReconHub](https://chrome-stats.com/d/reconhub) — 5 users
- [CYFARE Reconner](https://chrome-stats.com/d/cyfare-reconner) — 16 users
- [Spyboy CyberSuite](https://chrome-stats.com/d/spyboy-cybersuite) — 2 users
- [Recon](https://chrome-stats.com/d/recon) — 34 users, 5.00 / 5
- [InfoWeb](https://chrome-stats.com/d/infoweb) — 2 users
- [CS-Recon](https://chrome-stats.com/d/cs-recon) — 2 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/web-recon)