recon-ng V5.0 更新版本 被动信息收集
刚看了苑老师kali linux教程的RECON-NG教程，很多命令改变了，网络上却很少有recon-ng 的新版本介绍，写下来做记录。
输入recon-ng，打开recon-ng
root@kali:~# recon-ng
[*] Version check disabled.
_/_/_/ _/_/_/_/ _/_/_/ _/_/_/ _/ _/ _/ _/ _/_/_/
_/ _/ _/ _/ _/ _/ _/_/ _/ _/_/ _/ _/
_/_/_/ _/_/_/ _/ _/ _/ _/ _/ _/ _/_/_/_/ _/ _/ _/ _/ _/_/_/
_/ _/ _/ _/ _/ _/ _/ _/_/ _/ _/_/ _/ _/
_/ _/ _/_/_/_/ _/_/_/ _/_/_/ _/ _/ _/ _/ _/_/_/
/\
/ \\ /\
Sponsored by... /\ /\/ \\V \/\
/ \\/ // \\\\\ \\ \/\
// // BLACK HILLS \/ \\
www.blackhillsinfosec.com
____ ____ ____ ____ _____ _ ____ ____ ____
|____] | ___/ |____| | | | |____ |____ |
| | \_ | | |____ | | ____| |____ |____
www.practisec.com
[recon-ng v5.0.0, Tim Tomes (@lanmaster53)]
[1] Recon modules
[recon-ng][default] >
Recon-ng 5 最大的改变是没有模块，需要下载。
下面介绍如何下载模块。
1.输入 marketplace refresh 更新模块列表
[recon-ng][default] > marketplace refresh
[*] Marketplace index refreshed.
[recon-ng][default] >
2.输入 marketplace search hackertarget 搜索模块索引
[recon-ng][sina] > marketplace search hackertarget
[*] Searching module index for 'hackertarget'...
+-----------------------------------------------------------------------------+
| Path | Version | Status | Updated | D | K |
+-----------------------------------------------------------------------------+
| recon/domains-hosts/hackertarget | 1.0 | installed | 2019-06-24 | | |
+-----------------------------------------------------------------------------+
D = Has dependencies. See info for details.
K = Requires keys. See info for details.
[recon-ng][sina] >
3.输入 marketplace install recon/domains-hosts/hackertarget ，安装hackertarget模块
[recon-ng][default] > marketplace install recon/domains-hosts/hackertarget
[*] Module installed: recon/domains-hosts/hackertarget
[*] Reloading modules...
[recon-ng][default] >
4.输入 modules load recon/domains-hosts/hackertarget 加载模块
[recon-ng][default] > modules load recon/domains-hosts/hackertarget
[recon-ng][default][hackertarget] >
输入 info 查看信息
[recon-ng][default][hackertarget] > info
Name: HackerTarget Lookup
Author: Michael Henriksen (@michenriksen)
Version: 1.0
Description:
Uses the HackerTarget.com API to find host names. Updates the 'hosts' table with the results.
Options:
Name Current Value Required Description
------ ------------- -------- -----------
SOURCE default yes source of input (see 'show info' for details)
Source Options:
default SELECT DISTINCT domain FROM domains WHERE domain IS NOT NULL
string representing a single input
path to a file containing a list of inputs
query database query returning one column of inputs
[recon-ng][sina][hackertarget] >
4.输入 options set SOURCE rapid7.com , 改变选项SOURCE显示rapid.com主机
[recon-ng][default][hackertarget] > options set SOURCE rapid7.com
SOURCE => rapid7.com
[recon-ng][default][hackertarget] > run
----------
RAPID7.COM
----------
[*] [host] rapid7.com (13.249.47.238)
[*] [host] scanner1.labs.rapid7.com (71.6.233.2)
[*] [host] scanner2.labs.rapid7.com (71.6.233.129)
[*] [host] scanner3.labs.rapid7.com (31.24.231.211)
[*] [host] scanner4.labs.rapid7.com (31.24.231.223)
[*] [host] sonar.labs.rapid7.com (34.236.82.205)
...
模块添加完成，输入show hosts查看
[recon-ng][default] > show hosts
+---------------------------------------------------------------------------------------------------------------------------------+
| rowid | host | ip_address | region | country | latitude | longitude | module |
+---------------------------------------------------------------------------------------------------------------------------------+
| 1 | rapid7.com | 99.84.219.205 | | | | | hackertarget |
| 2 | hostedconsole-pso-01.rapid7.com | 208.118.237.241 | | | | | hackertarget |
| 3 | securitysolutions-01.rapid7.com | 208.118.237.81 | | | | | hackertarget |
| 4 | smtp001.rapid7.com | 64.125.235.5 | | | | | hackertarget |
| 5 | va1.rapid7.com | 208.118.237.38 | | | | | hackertarget |
| 6 | smtp002.rapid7.com | 208.118.227.12 | | | | | hackertarget |
| 7 | va2.rapid7.com | 208.118.237.39 | | | | | hackertarget |
| 8 | owa2.rapid7.com | 208.118.227.14 | | | |
..............................................................................................................................................
| 134 | www.rapid7.com | 13.32.204.13 | | | | | hackertarget |
| 135 | cf-gagvufh363u546y.rapid7.com | 35.169.78.237 | | | | | hackertarget |
| 136 | legacy.rapid7.com | 208.118.227.15 | | | | | hackertarget |
| 137 | community.rapid7.com | 34.210.186.136 | | | | | hackertarget |
+---------------------------------------------------------------------------------------------------------------------------------+
[*] 137 rows returned
[recon-ng][default] >