A lightweight, interactive target scope mapper and visual note-taking dashboard designed for security researchers, bug bounty hunters, and pentesters.
Instead of heavy and complex Attack Surface Management (ASM) platforms, ReconCanvas provides a fast, distraction-free visual tree interface to map domain hierarchies, structure subdomains/endpoints, and maintain organized Markdown notes for every single node.
- Interactive D3.js Tree Visualizer: Seamlessly drag, re-parent, expand, and organize target nodes on a dynamic canvas.
- Smart Path Reconstruction: Automatically detects domains, TLDs, and endpoints to build accurate full URLs on right-click actions (Open URL, Copy, Shodan, Wayback Machine).
- Rich Markdown Notes: Click any node to log findings, store proof-of-concept payloads, or format bullet points using full Markdown support with instant preview.
- Bulk Import: Quickly paste large lists of subdomains or paths to automatically generate deep tree structures in seconds.
- Status Tracking: Color-coded node statuses (Unchecked, Testing, Lead, Vulnerable, Dead End) with live statistics.
- Export & Portability: Export individual node findings as clean Markdown reports (
.md) or backup/restore entire workspaces via JSON. - Privacy & Local First: 100% client-side execution. Your recon data stays strictly in your browser's local storage.
The UI and interactive node-tree concept were heavily inspired by the classic OSINT Framework by Justin Nordine. We fell in love with its intuitive structure-mapping layout and adapted that clean visual approach specifically for target scope mapping and individual vulnerability note-taking.
- Download or clone the repository.
- Open
index.htmlin any modern web browser. - Start building your target map!