Recon-ng - Information gathering

Iniciado por HATI, Abril 17, 2016, 06:54:10 PM

Tema anterior - Siguiente tema

0 Miembros y 1 Visitante están viendo este tema.

Abril 17, 2016, 06:54:10 PM Ultima modificación: Febrero 03, 2020, 04:35:56 PM por HATI


You can read this post on Spanish language:No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
Recon-ng is a Python framework focused on gathering information, it can obtain a lot of data from a target and his environment. It have differente and independent modules, and you can combine the results obtained for more efficiency. Definetly, Recon-ng is a powerful tool for gathering information fast on the web.

Basics uses and modules:

# Start menu:
Código: php

# Help
Código: php

Recon-ng lets you create profiles for analyze different objectives without mixing information, that is stored for later reference, something very useful.
# Create profile
Código: php
workspaces add <perfil>

Código: php
add domains <domain>

Código: php
show domains

We can see the different modules of Recon-ng, the modules are clasiffied in different sections (Discovery, Exploitation, Import, Recon y Reporting).
# Show modules
Código: php
show modules

We can search modules by name:
Código: php
SEARCH <module>

When we know which module we will use, we must load it (i will use netcraft for the example). There are two commands for do this:
# Select module
Código: php
use <module>
load <module>

With the module loaded, we can see information abaut it and his options.
Código: php
show info

If we have not created a profile, we can select our "target"
Código: php
set SOURCE <domain>

# Start module
Código: php

There are a lot of different modules, they bring us great variety of ways to find information of a specific target, we can even use social networks like Twitter or analyze domains looking for ssl vulnerabilities. The results can be displayed in different tables, as "contacts", "companies", "hosts" ...
Código: php
show <lista>

Spanish post:No tienes permitido ver los links. Registrarse o Entrar a mi cuenta
Official web: No tienes permitido ver los links. Registrarse o Entrar a mi cuenta

Regards, hati  ;D

Jugar o perder