recon-ng

Start the tool

$ recon-ng

$ workspaces create [workspace_name]

$ marketplace search

$ marketplace install all

$ modules load profiler

$ db insert profiles

$ run

recon-ng

None
    Recon-ng is executed without any specific command-line arguments. It starts an interactive console environment.

Recon-ng is a powerful, modular, and open-source web reconnaissance framework written in Python. It is designed to automate the process of information gathering on target organizations or individuals.

It provides a command-line interface with features similar to Metasploit, allowing users to perform reconnaissance tasks such as: discovering subdomains, finding email addresses, identifying employee names, mapping network infrastructure, and harvesting information from various online sources.

Recon-ng leverages publicly available APIs and data sources to conduct passive reconnaissance, minimizing the risk of detection. Its modular design enables easy extension and customization through custom modules, allowing users to adapt the framework to their specific reconnaissance needs. It has an embedded database that helps with tracking found information which can be then filtered for easier reading. The framework is frequently updated with new modules and features, making it a valuable tool for penetration testers, security researchers, and intelligence analysts.

Recon-ng relies on publicly available APIs. The accuracy and availability of the data gathered depends on these APIs and the target's online presence.
Information collected might not be accurate.

Recon-ng uses modules for information gathering. To browse the available modules, use the command 'marketplace search'. To install a module, use 'marketplace install '. To load a module, use 'modules load '.

Many modules require API keys to function. API keys can be added with the command 'keys add '.

Recon-ng organizes data within workspaces, creating a new workspace for each project will improve workflow. Use the command 'workspaces create ' to create a new workspace.

Data can be displayed with the command 'show ', or written to files. Example: `show hosts`

Recon-ng was created by Tim Tomes (@LaNMaSteR53) and has been actively developed and maintained by the community.

nmap(1), whois(1), dig(1)