Recon-ng basics: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
 
(11 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
−
*[[recon schnellstart]]
+
=Marketplace search=
 +
*[recon-ng][default] > marketplace search
  
−
=Add API keys to recon-ng=
+
  +---------------------------------------------------------------------------------------------------+
−
*[recon-ng][default]> keys add shodan_api xxxxxxxxxxxxxxxxxxxxx
+
   |                       Path                        | Version |    Status    |  Updated  | D | K |
−
=keys list=
+
   +---------------------------------------------------------------------------------------------------+
−
*[recon-ng][default] > keys list
+
   | discovery/info_disclosure/cache_snoop              | 1.1     | not installed | 2020-10-13 |  |  |
−
  +---------------------------------------------------------------------+
+
  | discovery/info_disclosure/interesting_files        | 1.1    | not installed | 2020-01-13 |  |  |
−
   |     Name      |                       Value                        |
+
  | exploitation/injection/command_injector           | 1.0    | not installed | 2019-06-24 |  |  |
−
   +---------------------------------------------------------------------+
+
  | exploitation/injection/xpath_bruter                | 1.2    | not installed | 2019-10-08 |  |  |
−
   | shodan_api     | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx           |
+
  ...
−
   | twitter_api   | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx            |
+
  ...
−
   | twitter_secret | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx            |
+
  ...
−
   +---------------------------------------------------------------------+
+
  | recon/domains-contacts/whois_pocs                  | 1.0    | not installed | 2019-06-24 |  |   |
 +
   ...
 +
  ...
 +
  ...
 +
  | reporting/json                                    | 1.0    | not installed | 2019-06-24 |  |  |
 +
  | reporting/list                                    | 1.0    | not installed | 2019-06-24 |  |  |
 +
  | reporting/proxifier                                | 1.0    | not installed | 2019-06-24 |  |  |
 +
  | reporting/pushpin                                  | 1.0    | not installed | 2019-06-24 |  | * |
 +
  | reporting/xlsx                                    | 1.0    | not installed | 2019-06-24 |  |  |
 +
   | reporting/xml                                      | 1.1    | not installed | 2019-06-24 |  |   |
 +
   +---------------------------------------------------------------------------------------------------+
  
−
=search shodan=
+
  D = Has dependencies. See info for details.
−
*[recon-ng][default] >  marketplace search shodan
+
  K = Requires keys. See info for details.
−
[*] Searching module index for 'shodan'...
 
  
−
=install recon/hosts-ports/shodan_ip=
+
=search=
−
*[recon-ng][xinux] >  marketplace install recon/hosts-ports/shodan_ip
+
*marketplace search whois
−
[recon-ng][xinux][shodan_ip] > back
+
=install=
−
=load module=
+
*marketplace install   recon/domains-contacts/whois_pocs
−
*[recon-ng][xinux] > modules load recon/hosts-ports/shodan_ip
+
 
 +
=load=
 +
*modules load recon/domains-contacts/whois_pocs
 
=info=
 
=info=
−
*[recon-ng][xinux][shodan] > info
+
*[recon-ng][default][whois_pocs] > info
−
=set source=
+
<pre>
−
*[recon-ng][xinux][shodan_ip] > options set SOURCE 176.9.81.219
+
      Name: Whois POC Harvester
 +
    Author: Tim Tomes (@lanmaster53)
 +
  Version: 1.0
 +
 
 +
Description:
 +
  Uses the ARIN Whois RWS to harvest POC data from whois queries for the given domain. Updates the
 +
  'contacts' table with the results.
 +
 
 +
Options:
 +
  Name    Current Value  Required  Description
 +
  ------  -------------  --------  -----------
 +
  SOURCE                yes      source of input (see 'info' for details)
 +
 
 +
Source Options:
 +
  default        SELECT DISTINCT domain FROM domains WHERE domain IS NOT NULL
 +
  <string>      string representing a single input
 +
  <path>        path to a file containing a list of inputs
 +
  query <sql>    database query returning one column of inputs
 +
</pre>
 +
 
 +
=set=
 +
*options set SOURCE redhat.com
 +
 
 
=run=
 
=run=
−
*[recon-ng][xinux][shodan_ip] > run
+
*run

Aktuelle Version vom 14. Juli 2021, 14:38 Uhr

Marketplace search

  • [recon-ng][default] > marketplace search
 +---------------------------------------------------------------------------------------------------+
 |                        Path                        | Version |     Status    |  Updated   | D | K |
 +---------------------------------------------------------------------------------------------------+
 | discovery/info_disclosure/cache_snoop              | 1.1     | not installed | 2020-10-13 |   |   |
 | discovery/info_disclosure/interesting_files        | 1.1     | not installed | 2020-01-13 |   |   |
 | exploitation/injection/command_injector            | 1.0     | not installed | 2019-06-24 |   |   |
 | exploitation/injection/xpath_bruter                | 1.2     | not installed | 2019-10-08 |   |   |
  ...
  ...
  ...
 | recon/domains-contacts/whois_pocs                  | 1.0     | not installed | 2019-06-24 |   |   |
  ...
  ...
  ...
 | reporting/json                                     | 1.0     | not installed | 2019-06-24 |   |   |
 | reporting/list                                     | 1.0     | not installed | 2019-06-24 |   |   |
 | reporting/proxifier                                | 1.0     | not installed | 2019-06-24 |   |   |
 | reporting/pushpin                                  | 1.0     | not installed | 2019-06-24 |   | * |
 | reporting/xlsx                                     | 1.0     | not installed | 2019-06-24 |   |   |
 | reporting/xml                                      | 1.1     | not installed | 2019-06-24 |   |   |
 +---------------------------------------------------------------------------------------------------+

 D = Has dependencies. See info for details.
 K = Requires keys. See info for details.

search

  • marketplace search whois

install

  • marketplace install recon/domains-contacts/whois_pocs

load

  • modules load recon/domains-contacts/whois_pocs

info

  • [recon-ng][default][whois_pocs] > info
      Name: Whois POC Harvester
    Author: Tim Tomes (@lanmaster53)
   Version: 1.0

Description:
  Uses the ARIN Whois RWS to harvest POC data from whois queries for the given domain. Updates the
  'contacts' table with the results.

Options:
  Name    Current Value  Required  Description
  ------  -------------  --------  -----------
  SOURCE                 yes       source of input (see 'info' for details)

Source Options:
  default        SELECT DISTINCT domain FROM domains WHERE domain IS NOT NULL
  <string>       string representing a single input
  <path>         path to a file containing a list of inputs
  query <sql>    database query returning one column of inputs

set

  • options set SOURCE redhat.com

run

  • run
Abgerufen von „https://xinux.net/index.php?title=Recon-ng_basics&oldid=26009“