🛰️ Recon-ng — Advanced Web Reconnaissance Framework

What is Recon-ng?

Recon-ng is a full-featured Web Reconnaissance framework written in Python. It's similar to Metasploit but focused on passive and active information gathering. It provides powerful modules to automate OSINT tasks and gather intelligence from multiple public sources.

Main Features

Modular framework similar to Metasploit
Pre-built recon modules for domains, contacts, IPs, etc.
Built-in reporting and database interaction
Supports API keys for advanced data collection
Exports results in multiple formats

Installation

In Kali Linux:

sudo apt update
sudo apt install recon-ng

Using Git:

git clone https://github.com/lanmaster53/recon-ng.git
cd recon-ng
python3 recon-ng

Getting Started with Recon-ng

Launch Recon-ng
Create a workspace: workspaces create mytarget
Add a domain: add domains example.com
List modules: modules search
Select a module: modules load recon/domains-hosts/google_site_web
Set options: options set SOURCE example.com
Run module: run

Popular Modules

recon/domains-hosts/google_site_web - Find subdomains
recon/hosts-hosts/resolve - Resolve hostnames to IP
recon/contacts/enum/http - Gather emails via HTTP scraping
recon/domains-contacts/whois_pocs - Get WHOIS data
report/html - Export data to HTML report

Best Use Cases

Subdomain enumeration
WHOIS and contact data gathering
Email address and social handle discovery
Automated recon for bug bounty programs
Red team OSINT operations

Important Note

🔐 Always use Recon-ng ethically and legally. This tool is meant for educational, testing, and authorized security research purposes only.