OSINT Tool: Recon-ng

How to Use Open Source Intelligence Tool RECON-NG

Overview
"Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can be conducted quickly and thoroughly." [1]

Recon-ng is a tool used to perform open source intelligence on Domains and IP addresses. It allows you to find sub domains, their relative IP addresses, and perform geographical tagging, etc.


Download
Recon-ng


Syntax
[recon-ng][default] command



Help
To access the help menu type the following command:

• help
• example: 
• [recon-ng][default] help 

Database
Everything this script does is to populate a database which the user creates. This script's database query, creation, and deletion syntax is similar to MySQL.

1. Creating a Database

• To create a database type the following command:
• workspaces add
• example: workspaces add TableName

• Once you create your table you'll see the following prompt:
• [recon-ng][TableName]
• This means your table is ready for use with any of the modules.

2.  Defining Domains

• After you create a table you have to define a domain for all of the modules to take action on.
• To add a domain type the following:
• add domain 
• [recon-ng][TableName] add domain DomainName

3. Deleting a Table

• To delete a database type the following command:
• workspaces delete
• example: [recon-ng][default] workspaces delete TableName

Modules
To search for Modules follow these steps:
1. Select your table

• [recon-ng][default] workspaces select TableName

2. Search for Modules

• Search Syntax:
• [recon-ng][TableName] load SearchTerm
• Key search terms: domain, location, reports

3.  Loading a Modular

• From the list of option you are presented with copy & paste the whole line which contains the FilePath and the ModularName.
• example: [recon-ng][TableName] load Path&ModularName

Recommended Videos

• How To Kali 2.0 Recon-ng
• OSINT - recon-ng information gathering example tutorial
• Recon-ng Framework: Automated & Advanced Information Gathering

Reference(s)
1. Tools Kali

Social Media
Facebook:
https://www.facebook.com/BDavisCS/

Twitter:
@BDavis_CyberSec