• 🌙 Community Spirit

    Ramadan Mubarak! To honor this month, Crax has paused NSFW categories. Wishing you peace and growth!

Recon-ng Tutorials for Enumeration Targets (1 Viewer)

Currently reading:
 Recon-ng Tutorials for Enumeration Targets (1 Viewer)

Recently searched:

navian

Member
LV
1
Joined
Jul 12, 2023
Threads
10
Likes
1
Awards
4
Credits
778©
Cash
0$

Recon-ng Basics​

Firstly we need to create a workspaces related to the target organization. It will gather our research and findings under these workspaces.

1
2
workspaces list
workspaces create example-name
Untitled


You can create and list companies.

1
2
db insert companies
show companies
Untitled


You can add a domain name and list it.

1
2
db insert domains
show domains
Untitled


API KEYS​

You can find the Recon-ng API Key source here.
You can list keys, and add keys.

1
2
3
keys list #list the keys
keys add example_api xxxxxxxxxxxxxxxxxxxxx # adding API key to module.
keys add binaryedge_api b8880xxxxxxxxxxxxxxxxx # example add api key
Untitled

Modules​

You can see the modules that can be installed on recon-ng with the marketplace command.

1
marketplace search
Untitled

Modülleri yüklemek için aşağıdaki komutları kullanabilirsiniz

1
2
3
4
5
6
# To load all modules
marketplace install all # This command will load all supported or unsupported modules doe, but you may get some errors about censys libraries due to some incompatibilities with python 3.10.
# To load modules one by one
marketplace install path # So like this marketplace install recon/companies-contacts/bing_linkedin_cache

#Note: You may get an error because you did not add the APIs. Not all modules need API. But when adding the modules you need to the API, if the required API value is not available, you will get an error.

You can list installed modules.

1
modules search
Untitled

Start Recon to Targets​

We can select the module we want to run and start the recon as follows.

1
2
3
4
modules load recon/hosts-ports/censys_ip
options set SOURCE example.com
options set VIRTUAL_HOSTS EXCLUDE # You have three option about this settings = EXCLUDE, INCLUDE, ONLY
run
Untitled

Untitled


We can get reports with the help of the following commands in the workspaces where we have completed our tasks.

1
2
3
4
5
6
7
modules search reporting* # You can search modules with '*'. There is some different reporting methods.
modules load reporting/html
info
options set FILENAME /home/user/Desktop/results.html
options set CUSTOMER Company Name
options set CREATOR 0xhav0c
run
Untitled


Untitled

Untitled


Reference: https://secybr.com/posts/recon-ng-tutorials/
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Tips
Recently searched:

Similar threads

Users who are viewing this thread

Top Bottom