Recon-NG: Automated Information Gathering

Recon-NG is a Python-based reconnaissance framework that automates information gathering about domains, IPs and networks using multiple modules and data sources.

1. Start Recon-NG

recon-ng

2. hackertarget Module — Subdomain Discovery

marketplace install recon/domains-hosts/hackertarget
modules load recon/domains-hosts/hackertarget
options set SOURCE grammy.com
run

Returns subdomains and IPs associated with the target domain.

3. Shodan Module — Netblock Scanning

marketplace install recon/netblocks-hosts/shodan_net
modules load recon/netblocks-hosts/shodan_net
options set SOURCE [netblock]
run

4. Domains Analysed

Useful Commands

marketplace search   # List all available modules
modules search       # List installed modules
options list         # View current module options
show hosts           # View collected hosts
show contacts        # View collected contacts