Raccoon logo

Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning
1
2
+ 1
0

What is Raccoon?

It is a tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from fetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up to threaded dir busting and subdomain enumeration. Every scan outputs to a corresponding file.
Raccoon is a tool in the Security category of a tech stack.
Raccoon is an open source tool with 3K GitHub stars and 387 GitHub forks. Here’s a link to Raccoon's open source repository on GitHub

Who uses Raccoon?

Developers

Raccoon Integrations

Raccoon's Features

  • DNS details
  • DNS visual mapping using DNS dumpster
  • WHOIS information
  • TLS Data - supported ciphers, TLS versions, certificate details and SANs
  • Port Scan
  • Services and scripts scan
  • URL fuzzing and dir/file detection
  • Subdomain enumeration - uses Google dorking, DNS dumpster queries, SAN discovery and bruteforce
  • Web application data retrieval: CMS detection, Web server info and X-Powered-By, robots.txt and sitemap extraction, Cookie inspection, Extracts all fuzzable URLs, Discovers HTML forms, Retrieves all Email addresses, Scans target for vulnerable S3 buckets and enumerates them for sensitive files
  • Detects known WAFs
  • Supports anonymous routing through Tor/Proxies
  • Uses asyncio for improved performance
  • Saves output to files - separates targets by folders and modules by files

Raccoon Alternatives & Comparisons

What are some alternatives to Raccoon?
Badger
Domain management you'll enjoy. Domains effectively drive the entire internet, shouldn't they be easier to manage? We thought so, and thus, Badger was born! You shouldn't have to auction off your house and sacrifice your first born to transfer domains, you should be able to press a button that says "Transfer Domain" and be done with it. That is our philosophy, and we think you will appreciate it. Stop letting domain registrars badger you, and start using... Badger!
OpenSSL
It is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library.
Let's Encrypt
It is a free, automated, and open certificate authority brought to you by the non-profit Internet Security Research Group (ISRG).
Ensighten
Ensighten is a comprehensive website security company, offering next generation compliance, enforcement and client-side protection against data loss, ad injection and intrusion.
Google reCaptcha
It is a free service that protects your website from spam and abuse. It uses an advanced risk analysis engine and adaptive CAPTCHAs to keep automated software from engaging in abusive activities on your site. It does this while letting your valid users pass through with ease.
See all alternatives

Raccoon's Followers
2 developers follow Raccoon to keep up with related blogs and decisions.