AppRecon

Collect and export DOM links and network request URLs for development, QA, and authorised security testing.

AppRecon is a lightweight reconnaissance extension for developers, QA engineers and authorised security professionals. It automatically captures URLs discovered while you browse modern web applications, making it easy to build a clean, searchable inventory of application routes and resources. Unlike browser developer tools, AppRecon focuses on collecting and organising URLs for further analysis. As you interact with an application, AppRecon continuously discovers both DOM links and network request URLs, allowing you to filter, search and export the results in seconds. AppRecon also includes optional Config Discovery for authorised testing. When enabled, it performs a small set of targeted checks against the website you are actively browsing to identify potentially exposed configuration or backup files. Findings report the file type, location and relevant configuration indicators without storing discovered secret values. Features • Capture URLs from both page content and network requests • Filter by current domain or include subdomains • Remove duplicate URLs • Instantly search collected URLs • Replace query parameter values with FUZZ for fuzzing workflows • Optional Config Discovery for exposed web.config, appsettings.json, .env and site backup ZIP files • Validate configuration files to reduce false positives • Identify configuration indicator names without storing secret values • Copy URLs directly to the clipboard • Export collected URLs for use with other tools • All processing is performed locally within your browser Typical Use Cases • Web application reconnaissance • Authenticated application mapping • API and route discovery • Identifying accidentally exposed configuration and backup files during authorised testing • Building URL lists for tools such as ffuf, Katana and Nuclei • Exploring large single-page applications (SPAs) • QA and web application debugging Privacy AppRecon does not transmit collected URLs, Config Discovery findings or browsing data to external servers. All captured information and discovery results are processed locally within your browser. Config Discovery is optional and disabled unless enabled by the user.