Developed a Python-based framework automating passive and active reconnaissance in web application penetration testing. Integrated modules for subdomain enumeration, directory brute-forcing, and social engineering simulation.