Recon-ng Framework GuideStep-by-step reference: use Recon-ng modular recon with workspaces, marketplace modules and reporting. Educational purposes only.FAQ

What is Recon-ng?

Recon-ng is a modular reconnaissance framework written in Python. Like Metasploit for exploitation, it organizes information gathering into installable modules, stores everything in a SQLite database per workspace, and ships with workspaces, a community marketplace, and report generation.

Is Recon-ng legal?

Recon-ng itself is a legitimate open-source security research tool. Running its modules against targets you do not own or without explicit written permission is illegal. Use Recon-ng only in authorized labs and engagements with a defined scope.

How do I install Recon-ng on Kali Linux?

On Kali Linux run `sudo apt install recon-ng -y`. For the latest version, clone https://github.com/lanmaster53/recon-ng and run `pip3 install -r REQUIREMENTS`, then launch with `./recon-ng`.

How do I run my first Recon-ng workspace?

Launch the console with `recon-ng`, then run `workspaces create demo` and `workspaces select demo`. Each workspace keeps its own database, so results from different engagements never mix.

What are Recon-ng marketplace modules?

The marketplace hosts community modules organized by category path, for example `recon/domains-hosts/bing_domain_web`. Install with `marketplace install <path>`, load with `modules load <path>`, set options such as `options set SOURCE example.com`, then `run`.

How do Recon-ng API keys and reporting work?

Modules that call third-party services need keys, stored with `keys add shodan_api YOUR_KEY`. Query collected data with `db query hosts`, and export results using reporting modules such as `reporting load reporting/html` followed by `run`.

All tools · Sitemap · Games