otinstaller · Web and search

Install FinalRecon on Linux in one command

FinalRecon runs a set of web recon checks against a URL in one go: headers, SSL certificate, WHOIS, crawler, DNS, subdomains, directory search, and a port scan. The --full flag runs everything.

FinalRecon in three lines

pipx install otinstaller
ot install finalrecon
ot run finalrecon -- d:example.com

Runs thewhiteh4t/FinalRecon (MIT, ★ 3k, otinstaller v0.0.4, registry updated Oct 13, 2026). otinstaller installs and runs it; it does not change or verify it.

What FinalRecon is for

A first look at a site before deeper tools.
A single report with the basics for a case.

Typed inputs for FinalRecon

otinstaller translates these prefixes into FinalRecon's own flags. Anything else after -- is passed through unchanged, so every original flag still works.

d:: domain · ot run finalrecon -- d:example.com

It also takes ip input through its own flags; there is no typed prefix for those yet.

Run every installed tool that takes the same input at once: ot run --all d:example.com

Where the results go

Every run lands under ./results/finalrecon/<target>/ as a timestamped output file plus a .meta.json sidecar: the exact command, start and end time, exit code, and the SHA-256 of the output. Group runs with --case, compare the last two with ot diff finalrecon <target>, and pull indicators out with ot extract.

Before you run it

Directory search and port scan are active. Use the passive modules on targets you do not own.
Some modules take API keys in its own config.

Update, remove, inspect

ot info finalrecon      # inputs, flags, keys
ot example finalrecon   # sample output
ot update finalrecon    # move to the next tested version
ot remove finalrecon    # delete its virtualenv

Full reference for this tool: docs for finalrecon.

Pairs with

SpiderFoot

SpiderFoot runs two hundred-odd modules against a domain, IP, email, or username and links what they return into one graph.

BBOT

BBOT is a recursive scanner that starts from a domain or IP, discovers subdomains, hosts, and services, and feeds each finding back in as a new target.

ctfr

ctfr lists the subdomains of a domain by reading Certificate Transparency logs through crt.sh.

FAQ

FinalRecon with otinstaller, answered

How do I install FinalRecon on Kali or Ubuntu?

Install otinstaller once with pipx install otinstaller, run ot init, then ot install finalrecon. The tool lands in its own virtualenv under ~/.otinstaller/, pinned to a version that was tested on Ubuntu, so nothing touches your system Python. ot doctor flags a missing git or venv module.

Which inputs does FinalRecon take through otinstaller?

d: (domain). otinstaller maps each prefix to FinalRecon's own flag. Everything after -- that is not a typed input is passed through unchanged, so the original flags still work.

Where does otinstaller save FinalRecon results?

Under ./results/finalrecon/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar with the exact command, timing, exit code, and SHA-256. Add --case <name> to group runs, and ot diff finalrecon <target> to compare the last two.

Does FinalRecon need an API key or a login?

No key is required for the basic run. Some modules take API keys in its own config.

Can I run FinalRecon together with other tools?

Yes. ot run --all d:example.com runs every installed tool that accepts domain input, in parallel, including FinalRecon. Save the combination as a playbook to repeat it.