September 27, 2026CVSS 9.9ANALYSIS
The Maintenance Worker Runs as Superuser: pg_partman's Config-Column SQL Injection (CVE-2026-61781)
11 min · READ →
// FIELD NOTES
Latest Research
Is there a hidden camera in this Airbnb?
Five guided checks answer one question each by running several tools for you, so you never have to know which one to open.
READ THE FULL GUIDE →Every result shows what was checked and what was not. A check that could not see the network says so, rather than reporting nothing found.
New Vulnerabilities In Your Software, The Day They Land
Stop checking vulnerability feeds by hand. Name the software you run and RECON watches NVD for every new CVE against it, and CISA KEV for confirmed exploitation, then tells you in plain words what it lets an attacker do.
- NVD: every CVE published against the software you name
- CISA KEV: whether that CVE is already being exploited
- What it lets an attacker do, in plain words, not just a score
// INSTRUMENT SUITE · 24 MODULES · 4 CATEGORIES
INSTRUMENT SUITE
// 01 · CONNECTIVITY & DIAGNOSTICS
MOD-01
READY
PING
ICMP round-trip time, packet loss, and jitter with live waveform readout.
MOD-02
READY
TRACEROUTE
Hop-by-hop path discovery with tactical geographic map and animated route arcs.
MOD-03
READY
MTR
Continuous path-quality monitoring — identifies which hop drops packets across multiple probe rounds.
MOD-04
READY
DNS / DIG
Query every record type (A, AAAA, MX, CNAME, NS, TXT, SOA, CAA, PTR, SRV) against a choice of IPv4 or IPv6 resolvers, with real dig-format output and TTLs.
// 02 · DISCOVERY & SCANNING
MOD-05
READY
PORT SCAN
TCP port scanning with service detection, banner grabbing, and direct CVE lookup per detected service.
MOD-06
READY
LAN SCAN
Discover active hosts on the local subnet via ICMP/TCP with vendor identification.
MOD-07
READY
PING SWEEP
Scan a CIDR range to identify alive hosts across an entire network.
MOD-08
READY
BONJOUR
Browse mDNS/Bonjour services advertised on the local network.
MOD-24
READY
SUBENUM
Subdomain enumeration via wordlist-based DNS brute-force with 420+ common prefixes and parallel resolution.
// 03 · SECURITY & INTELLIGENCE
MOD-09
READY
WHOIS / RDAP
Ownership, registrar, ASN, and one-tap abuse contact lookup from parsed RDAP and classic WHOIS data.
MOD-10
READY
TLS INSPECT
SSL/TLS certificate chain analysis, cipher suites, ALPN, and expiry detection.
MOD-11
READY
CVE / NVD
Search the National Vulnerability Database by keyword or CVE ID with CVSS severity scoring.
MOD-12
READY
ASN LOOKUP
Autonomous system lookup via Team Cymru — prefix, registry, allocation date.
MOD-21
READY
CERT WATCH
Monitor TLS certificate expiry for your domains — get notified before certificates expire in production.
MOD-22
READY
SHODAN
Look up an IP in Shodan InternetDB for known open ports, hostnames, and CVEs — passive, no scanning.
// 04 · UTILITY
MOD-13
READY
SPEED TEST
Download and upload throughput over HTTPS, or raw TCP against a host you control.
MOD-14
READY
WIFI INFO
Current connection details: SSID, BSSID, interface, IP address, and subnet mask.
MOD-15
READY
IP CALC
Subnet math from CIDR: mask, host range, broadcast, class, scope.
MOD-16
READY
REVERSE DNS
IP-to-hostname PTR lookup in one tap.
MOD-17
READY
SEC HEADERS
Grades security response headers — HSTS, CSP, frame and MIME protections, cookie flags, and server version disclosure.
MOD-18
READY
TOPOLOGY
Force-directed graph of the devices found by LAN scan, with per-node port scan launch.
MOD-19
READY
HTTP CLIENT
Compose and send custom HTTP requests with method, headers, and body — inspect full response with timing.
MOD-20
READY
WAKE ON LAN
Send magic packets to wake sleeping devices on your local network by MAC address.
MOD-23
READY
SNMP
Query SNMP-enabled devices for system info, interface stats, and OID trees via SNMPv2c.
// COMMS · DIRECT LINE
YOUR OPERATOR
VS
VLADIMIR SLAVIN
FOUNDER · SLVN GROUP S.R.O. · PRAGUE
RECON is built by a single engineer with 20+ years of enterprise network work. Every tool exists because I needed it in the field and couldn't find a mobile version worth using. Email me directly — I read everything, I respond within 24 hours, and your feedback shapes what ships next.
IS MY STACK EXPOSED? →a briefing from the founder · once or monthly[email protected]< 24H RESPONSE
// MISSION READY · DOWNLOAD AUTHORISED
DEPLOY NOW
RECON · TACTICAL NET OPS
$14.99ONE-TIME PURCHASE
One-time purchase · No subscription · All 24 tools unlocked at install · iPhone · iOS 17+