<commit_before>recon-ng


# Manual usage

[recon-ng][default] > workspaces list

  +------------+
  | Workspaces |
  +------------+
  | default    |
  +------------+

[recon-ng][default] > workspaces add test
[recon-ng][test] > add domains
domain (TEXT): target.com
[recon-ng][test] > add companies
company (TEXT): Target
description (TEXT): 
[recon-ng][test] > resource /opt/discover/resource/recon-ng/manual-passive.rc
[recon-ng][test] > resource /opt/discover/resource/recon-ng/manual-active.rc
[recon-ng][test] > show dashboard

  +-------------------------------------------------+
  |                 Activity Summary                |
  +-------------------------------------------------+
  |                  Module                  | Runs |
  +-------------------------------------------------+
  | recon/companies-contacts/facebook        | 5    |
  | recon/domains-contacts/pgp_search        | 1    |
  | recon/domains-contacts/whois_pocs        | 1    |
  | ...                                      |      |
  +-------------------------------------------------+


  +----------------------------+
  |      Results Summary       |
  +----------------------------+
  |     Category    | Quantity |
  +----------------------------+
  | Domains         | 1        |
  | Companies       | 1        |
  | Netblocks       | 0        |
  | Locations       | 0        |
  | Vulnerabilities | 0        |
  | Ports           | 0        |
  | Hosts           | 20       |
  | Contacts        | 5        |
  | Credentials     | 0        |
  | Leaks           | 0        |
  | Pushpins        | 0        |
  | Profiles        | 0        |
  +----------------------------+

[recon-ng][target.com] > show hosts
...

[recon-ng][target.com] > show contacts
...
------------------------------------------------------------------------------------------------------

# Use hidden menu option 98 from Discover.

domain: Target
target: target.com

Resource file run: passive.rc
------------------------------------------------------------------------------------------------------

# Need to test

recon/contacts-contacts/mailtester
recon/contacts-contacts/mangle
recon/contacts-contacts/unmangle

recon/contacts-domains/migrate_contacts
recon/contacts-profiles/fullcontact

recon/hosts-domains/migrate_hosts

recon/locations-locations/geocode
recon/locations-locations/reverse_geocode

recon/locations-pushpins/flickr
recon/locations-pushpins/instagram
recon/locations-pushpins/picasa
recon/locations-pushpins/shodan
recon/locations-pushpins/twitter
recon/locations-pushpins/youtube

recon/netblocks-companies/whois_orgs
recon/netblocks-hosts/reverse_resolve
recon/netblocks-hosts/shodan_net
recon/netblocks-ports/census_2012

recon/ports-hosts/migrate_ports

# Don't use

recon/domains-domains/brute_suffix
------------------------------------------------------------------------------------------------------

# Output

spool start <file>

query SELECT <field, field2|*> FROM <hosts|contacts|creds> WHERE <field>='value' ORDER BY <field>

query SELECT host, ip_address FROM hosts ORDER BY host
query SELECT last_name, first_name FROM contacts ORDER BY last_name

query SELECT email FROM contacts ORDER BY email
query SELECT * FROM contacts ORDER BY fname
query DELETE FROM hosts WHERE ip_address='192.168.2.12'
<commit_msg>Update notes on recon-ng.<commit_after>recon-ng


# Manual usage

[recon-ng][default] > workspaces list

  +------------+
  | Workspaces |
  +------------+
  | default    |
  +------------+

[recon-ng][default] > workspaces add test
[recon-ng][test] > add domains
domain (TEXT): target.com
[recon-ng][test] > add companies
company (TEXT): Target
description (TEXT): 
[recon-ng][test] > resource /opt/discover/resource/recon-ng/manual-passive.rc
[recon-ng][test] > resource /opt/discover/resource/recon-ng/manual-active.rc
[recon-ng][test] > show dashboard

  +-------------------------------------------------+
  |                 Activity Summary                |
  +-------------------------------------------------+
  |                  Module                  | Runs |
  +-------------------------------------------------+
  | recon/companies-contacts/facebook        | 5    |
  | recon/domains-contacts/pgp_search        | 1    |
  | recon/domains-contacts/whois_pocs        | 1    |
  | ...                                      |      |
  +-------------------------------------------------+


  +----------------------------+
  |      Results Summary       |
  +----------------------------+
  |     Category    | Quantity |
  +----------------------------+
  | Domains         | 1        |
  | Companies       | 1        |
  | Netblocks       | 0        |
  | Locations       | 0        |
  | Vulnerabilities | 0        |
  | Ports           | 0        |
  | Hosts           | 20       |
  | Contacts        | 5        |
  | Credentials     | 0        |
  | Leaks           | 0        |
  | Pushpins        | 0        |
  | Profiles        | 0        |
  +----------------------------+

[recon-ng][target.com] > show hosts
...

[recon-ng][target.com] > show contacts
...
------------------------------------------------------------------------------------------------------

# Use hidden menu option 98 from Discover.

domain: Target
target: target.com

Resource file run: passive.rc
------------------------------------------------------------------------------------------------------

# Need to test

recon/contacts-contacts/mailtester
recon/contacts-contacts/mangle
recon/contacts-contacts/unmangle

recon/contacts-domains/migrate_contacts
recon/contacts-profiles/fullcontact

recon/hosts-domains/migrate_hosts

recon/locations-locations/geocode
recon/locations-locations/reverse_geocode

recon/locations-pushpins/flickr
recon/locations-pushpins/instagram
recon/locations-pushpins/picasa
recon/locations-pushpins/shodan
recon/locations-pushpins/twitter
recon/locations-pushpins/youtube

recon/netblocks-companies/whois_orgs
recon/netblocks-hosts/reverse_resolve
recon/netblocks-hosts/shodan_net
recon/netblocks-ports/census_2012

recon/ports-hosts/migrate_ports

# Don't use

recon/domains-domains/brute_suffix
------------------------------------------------------------------------------------------------------

# API keys 

[recon-ng][default] > keys list

  +---------------------------+
  |        Name       | Value |
  +---------------------------+
  | bing_api          |       |
  | builtwith_api     |       |
  | facebook_api      |       |
  | facebook_password |       |
  | facebook_secret   |       |
  | facebook_username |       |
  | flickr_api        |       |
  | fullcontact_api   |       |
  | google_api        |       |
  | google_cse        |       |
  | instagram_api     |       |
  | instagram_secret  |       |
  | ipinfodb_api      |       |
  | jigsaw_api        |       |
  | jigsaw_password   |       |
  | jigsaw_username   |       |
  | linkedin_api      |       |
  | linkedin_secret   |       |
  | pwnedlist_api     |       |
  | pwnedlist_iv      |       |
  | pwnedlist_secret  |       |
  | shodan_api        |       |
  | twitter_api       |       |
  | twitter_secret    |       |
  +---------------------------+

[recon-ng][default] > keys add bing_api <value>
[*] Key 'bing_api' added.
------------------------------------------------------------------------------------------------------

# Output

spool start <file>

query SELECT <field, field2|*> FROM <hosts|contacts|creds> WHERE <field>='value' ORDER BY <field>

query SELECT host, ip_address FROM hosts ORDER BY host
query SELECT last_name, first_name FROM contacts ORDER BY last_name

query SELECT email FROM contacts ORDER BY email
query SELECT * FROM contacts ORDER BY fname
query DELETE FROM hosts WHERE ip_address='192.168.2.12'

{'fraction_non_alphanumeric': 0.2783717634934948, 'fraction_numerical': 0.008244235475975782, 'mean_word_length': 1.2038035764973034, 'pattern_counts': {'":': 0, '<': 14, '<?xml version=': 0, '>': 34, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 2, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2051768', 'n_tokens_mistral': 2335, 'n_tokens_neox': 2123, 'n_words': 388}