$ man recon-ng

Recon-ng

A modular web reconnaissance framework, with a console like Metasploit.

osint / reconpassive / local onlyvia awesome-security

⚠ Recon your own assets, or targets you have written permission to test. Passive OSINT reads public data, but using it to target someone else's systems can still be illegal or against their terms. Examples on this site use example.com placeholders.

## why a developer should care

Keeps everything you find in a workspace database, so recon becomes repeatable - useful for tracking your own attack surface over time.

## install

$ git clone https://github.com/lanmaster53/recon-ng && cd recon-ng && pip install -r REQUIREMENTS

Other platforms and pre-built binaries: official install guide ↗

Check it worked: open a new terminal and run ./recon-ng --version. "command not found" means it isn't installed or isn't on your PATH yet.

## shortcuts

domain:

# Start the console

$ ./recon-ng

# Inside the console: install and run a subdomain module

$ marketplace install recon/domains-hosts/hackertarget

# …then

$ modules load recon/domains-hosts/hackertarget

# …then

$ options set SOURCE {{target}}

# …then

$ run

→ official docs · ← all tools