Recon-ng is an advanced Web Reconnaissance tool written in Python. It is an effective tool in which open-source web-based Network reconnaissance can be led rapidly and all together.
Recon-ng is a total system and makes it simple for even the most up to the date of Python designers to contribute. Every module is a subclass of the “module” class.
The “module” class is an altered “cmd” mediator furnished with inherent usefulness that gives basic interfaces to basic errands, for example, institutionalizing yield, associating with the database, making the web asks for, and overseeing API keys.
Recon-ng has a look and feels similar to the Metasploit Framework, reducing the learning curve for leveraging the framework. However, it is quite different. Recon-ng is not intended to compete with existing frameworks, as it is designed exclusively for web-based open source reconnaissance.Step 1: To launch type recon-ng in Terminal
root@kali:~# recon-ngTo list all the commands type [recon-ng][default] > help
Step2: To get the subdomains of a domain we need to add the domain to workspace first.
recon-ng][default] > workspaces
Manages workspaces
Usage: workspaces [list|add|select|delete]
[recon-ng][default] > workspaces add vulnweb.comStep3: Netcraft need to be added to pull the subdomains of a domain.
Step4: Now you should type “Run” to get the list of subdomains associated with the domain.
[recon-ng][vulnweb.com][netcraft] > runStep5: To get a clear list view type “show hosts“
[recon-ng][vulnweb.com][netcraft] > show hostsStep6: Next you need to find the IP address associated with that by using “resolve“.
[recon-ng][vulnweb.com][netcraft] > use resolveStep7: It shows list of options and we need to select “recon/hosts-hosts/resolve“
recon-ng][vulnweb.com][netcraft] > use recon/hosts-hosts/resolveStep8: To find the country, longitude and location you should use “freegeoip“
[recon-ng][vulnweb.com][resolve] > use freegeoip
[recon-ng][vulnweb.com][freegeoip] > run
Step9: To extract the findings as a report use “use report”
[recon-ng][vulnweb.com][freegeoip] > use reportTherefore, all the hard work has been done. It is simple and takes little more than a few minutes.
A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently detailed…
Since mid-2024, cybersecurity researchers have been monitoring a sophisticated Android malware campaign dubbed "Tria Stealer,"…
Proton, the globally recognized provider of privacy-focused services such as Proton VPN and Proton Pass,…
The cybersecurity landscape faces increasing challenges as Arcus Media ransomware emerges as a highly sophisticated…
Proofpoint researchers have identified a marked increase in phishing campaigns and malicious domain registrations designed…
A recent investigation by Unit 42 of Palo Alto Networks has uncovered a sophisticated, state-sponsored…