RedTeam Recon Dashboard

About

RedTeam Recon Dashboard puts a full first-pass reconnaissance profile of any
website one click away. Open a site, click the toolbar icon, and a compact
dashboard aggregates four kinds of intelligence about the current tab — no API
keys, no accounts, and no setup.

━━ WHAT YOU GET ━━

• WHOIS / RDAP — registrar, creation / update / expiry dates, EPP status codes,
  nameservers, and DNSSEC state, pulled live over RDAP (the modern, HTTPS-based
  successor to port-43 WHOIS).

• DNS — A, AAAA, CNAME, MX, NS, TXT, SOA, and CAA records, resolved over
  DNS-over-HTTPS.

• Technology stack — CMS, JavaScript frameworks and libraries, analytics and
  tag managers, CDN, web server, and server-side language, fingerprinted from
  the page's own signals and response headers.

• Exposed ports & attack surface — publicly known open ports (with service
  labels), detected products (CPEs), known CVEs, and tags for the site's
  resolved IP address, sourced from Shodan's InternetDB.

Results stream into the dashboard panel-by-panel, so the fast lookups appear
instantly while slower ones fill in.

━━ PASSIVE BY DESIGN ━━

This extension performs NO active scanning. A browser cannot open raw network
sockets, and by design the extension never attempts to. "Exposed ports" come
from Shodan's existing, internet-wide scan data — not from probing the target.
Every data source is a read-only public API.

━━ SAFE WITH INTERNAL TARGETS ━━

Built for security professionals who work inside corporate networks:

• Private, loopback, link-local, CGNAT, and reserved hosts (10.x, 172.16–31.x,
  192.168.x, 127.x, *.local, *.corp, *.internal, …) are refused before any
  network request, so internal hostnames never leak to third-party services.

• If a public hostname resolves to a private IP (split-horizon DNS), the port
  lookup is skipped before the address would be sent to Shodan.

• The technology probe reads cookie NAMES only — never cookie values.

• Minimal permissions: activeTab (not broad host access), an explicit
  Content-Security-Policy, and only three external hosts contacted.

━━ HOW IT WORKS ━━

When you click the icon, the extension reads the active tab's URL, injects a
one-shot probe to gather technology signals, and queries three free public
services:

  • rdap.org               → WHOIS / RDAP registration data
  • cloudflare-dns.com     → DNS records (DNS-over-HTTPS)
  • internetdb.shodan.io   → publicly known open ports & CVEs

Nothing is stored, and no data is ever sent to the developer.

━━ WHO IT'S FOR ━━

Penetration testers, bug-bounty hunters, blue-teamers, SOC analysts, and web
developers who want a fast, at-a-glance recon profile without juggling half a
dozen CLI tools or websites.

━━ AUTHORIZED USE ONLY ━━

Use this tool only against assets you own or are explicitly authorized to
assess. It surfaces publicly available information; you are responsible for
complying with all applicable laws and policies.

Open source. No trackers. No analytics. No accounts.