Using Recon-NG is fairly easy. When you want to search for information, you
use
module_name
. For instance, in
Example 3-7
, you can see the use of a
twitter_mentions
module. When you use the module, you have to make sure that you have filled in all
of the required options. Each module may have a different set of options; even if the
options are the same across modules, such as the
SOURCE
option, the values may be
different. For the
twitter_mentions
module, we are using a domain name to look for
Twitter mentions.
Example 3-7. Using Recon-NG to search Twitter
[
recon-ng
][
default
][
pgp_search
]
> use recon/profiles-profiles/twitter_mentions
[
recon-ng
][
default
][
twitter_mentions
]
>
set
SOURCE oreilly.com
SOURCE
=
> oreilly.com
[
recon-ng
][
default
][
twitter_mentions
]
> run
-----------
OREILLY.COM
-----------
[
*
]
[
profile
]
homeAIinfo - Twitter
(
https://twitter.com/homeAIinfo
)
[
*
]
[
profile
]
homeAIinfo - Twitter
(
https://twitter.com/homeAIinfo
)
[
*
]
[
profile
]
OReillySecurity - Twitter
(
https://twitter.com/OReillySecurity
)
[
*
]
[
profile
]
OReillySecurity - Twitter
(
https://twitter.com/OReillySecurity
)
[
*
]
[
profile
]
OReillySecurity - Twitter
(
https://twitter.com/OReillySecurity
)
-------
SUMMARY
-------
[
*
]
5
total
(
2
new
)
profiles found.
When you run modules, you are populating a database that Recon-NG maintains. For
instance, in the process of running through a PGP module, I acquired names and
email addresses. Those were added to the contacts database within Recon-NG. You
can use the
show
command to list all the results you were able to get. You could also
use reporting modules. With a reporting module, you can take the contents of your
databases with whatever is in them and can export all of the results into a file. This
file may be XML, HTML, CSV, JSON, or a couple of other formats. It depends
entirely on which reporting module you choose. In
Example 3-8
, you can see that the
JavaScript Object Notation (JSON) reporting module was chosen. The options allow
you to select the tables from the database to export. You can also choose where you
want to put the file. Once the options are set, though the ones shown are defaults, you
can just run the module and the data will be exported.
Example 3-8. Recon-NG reporting module
[
recon-ng
][
default
][
xml
]
> use reporting/json
[
recon-ng
][
default
][
json
]
> show options
