Reconya
Reconya is a network reconnaissance and asset discovery tool written in Go. It sweeps the networks you define with ICMP, ARP and TCP probes, identifies devices by MAC address, hostname and OS fingerprint, scans their top ports with service detection, passively picks up IPv6 neighbours, and raises alerts for new devices, risky open ports or unreachable hosts. Everything is shown in a web console with a topology map and a live event log.
Reconya
In Development
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
This script is currently in active development and may be unstable or incomplete. Use in production environments is not recommended.
Installation
Default install:
1
bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/ct/reconya.sh)"
Default Credentials
| Username | Password |
|---|---|
admin | None |
Notes
The admin password is generated during install and stored as LOGIN_PASSWORD in /opt/reconya_data/.env. To change the username or password, edit that file and run systemctl restart reconya.
Reconya signs login sessions with a key built into the binary, not a per-install secret, so a session cookie from any Reconya installation is accepted by every other one. Keep port 3008 on a trusted network and never expose it to the internet.
Nothing is scanned until you add a network: open Networks, add the suggested subnet of the container (or any CIDR it can route to), select it and start the scan. MAC addresses and ARP discovery only work on the layer-2 segment the container is attached to, so give it an interface on each bridge or VLAN you want inventoried.
All outbound lookups are off, so vendor names come from a small built-in table. Set VENDOR_LOOKUP_ONLINE_ENABLED=true in /opt/reconya_data/.env to look up unknown MAC prefixes at api.macvendors.com, then restart the service.
Screenshots of discovered web services need a browser in the container, for example apt install chromium, which the script does not install.
Reconya is licensed under CC BY-NC 4.0: free for non-commercial use, commercial use needs permission from the author.