(http://i.imgur.com/TWwvbTh.png)
# RECON-NG #
You can read this post on Spanish language:Recon-ng - Recopilación de información (https://underc0de.org/foro/hacking/recon-ng-recopilacion-de-informacion/msg100151/#msg100151)
Recon-ng is a Python framework focused on
gathering information, it can obtain a lot of data from a target and his environment. It have differente and independent modules, and you can combine the results obtained for more efficiency. Definetly, Recon-ng is a powerful tool for gathering information fast on the web.
Basics uses and modules:
# Start menu:recon-ng
(http://i.imgur.com/7m9hAzD.png)
# Helphelp
(http://i.imgur.com/rqdMC5a.png)
Recon-ng lets you create profiles for analyze different objectives without mixing information, that is stored for later reference, something very useful.
# Create profileworkspaces add <perfil>
add domains <domain>
show domains
(http://i.imgur.com/vvnlBeD.png)
We can see the different modules of Recon-ng, the modules are clasiffied in different sections (Discovery, Exploitation, Import, Recon y Reporting).
# Show modulesshow modules
We can
search modules by name:
SEARCH <module>
(http://i.imgur.com/aZ64Ij9.png)
When we know which module we will use, we must load it (i will use
netcraft for the example). There are two commands for do this:
# Select moduleuse <module>
load <module>
With the module loaded, we can
see information abaut it and his options.
show info
If we have not created a profile, we can
select our "target"set SOURCE <domain>
(http://i.imgur.com/bm4hb8b.png)
# Start modulerun
(http://i.imgur.com/Gk7Oxgq.png)
There are a lot of different modules, they bring us great variety of ways to find information of a specific target, we can even use social networks like Twitter or analyze domains looking for ssl vulnerabilities. The results can be displayed in different tables, as "contacts", "companies", "hosts" ...
show <lista>
(http://i.imgur.com/QObDWvD.png)
Spanish post:Recon-ng - Recopilación de información (https://underc0de.org/foro/hacking/recon-ng-recopilacion-de-informacion/)
Official web: Recon-ng (https://bitbucket.org/LaNMaSteR53/recon-ng)
Regards, hati ;D