> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/bug-bounty/reconftw-six2dez.md).

# ReconFTW (six2dez)

## Enumerating Subdomains using ReconFTW

```javascript
./reconftw.sh -s <domain> -o <path to the folder>
```

## Full Recon using ReconFTW

i will run this in **screen** so that i switch off my VPS or something bad happens, my scan is still running in the background always.&#x20;

```javascript
./reconftw.sh -d domain.com -r --deep -o /root/Bug-Bounty/Domain.com
```

<figure><img src="/files/0yb7PtnnXsnK89AeJzza" alt=""><figcaption></figcaption></figure>

## Full Aggressive Recon and All Active Attacks

```javascript
./reconftw.sh -d www.domain.com -a --deep -o /root/Bug-Bounty/domain/
```

<figure><img src="/files/oqGUVxpl59vATzSUsJAK" alt=""><figcaption></figcaption></figure>