lanmaster53/recon-ng
Recon Ng
recon-ng is an open source intelligence reconnaissance framework designed to automate the collection and aggregation of public information. It is a modular intelligence tool that utilizes a system of pluggable modules to harvest target data, resolve DNS queries, and parse web content.
The framework is built as an API-driven tool with a programmatic interface to integrate with other security workflows. It is provided as a containerized application, using Docker to ensure a consistent environment for running reconnaissance tasks and managing a persistent data store.
Its capabilities cover external attack surface mapping and security research automation. The system includes a relational database for persistent record management, a secure local keystore for API key storage, and a headless browser engine for extracting data from dynamic web pages.
The environment is packaged for Docker to maintain consistency across different operating systems.
Features
- OSINT Automation Frameworks - Provides a comprehensive framework for automating the collection and aggregation of open source intelligence from public sources.
- Attack Surface Mapping - Automates the discovery and documentation of internet-facing assets to map an organization's digital footprint.
- Research Automation - Automates the harvesting and organization of data from open sources to streamline security research.
- Relational Database Persistence - Provides a relational database store for managing structured target information and query results persistently.
- Programmatic API Interfaces - Exposes core reconnaissance functionality through a programmatic API for integration into security workflows.
- Open Source Intelligence Frameworks - Provides a comprehensive framework for automating the collection and aggregation of open source intelligence.
- Open Source Intelligence Tools - Automates the collection and aggregation of publicly available information from web sources for reconnaissance.
- Intelligence Modules - Implements a modular architecture with pluggable modules for harvesting target data and parsing web content.
- Plugin-Based Architectures - Employs a modular plugin-based architecture to extend reconnaissance capabilities via independent functional units.
- Web Content Scrapers - Utilizes browser engines to parse complex web pages and extract structured data from dynamic site layouts.
- Database Record Querying - Provides interfaces for inserting target data into tables and executing custom queries for persistent storage.
- Concurrent Task Execution - Uses a concurrent execution model to send multiple network requests simultaneously, reducing data gathering time.
- Containerized Security Tooling - Ships as a Dockerized application to maintain a consistent environment for running reconnaissance tasks and data storage.
- API Key Management - Securely manages authentication tokens required to access data from third-party intelligence services.
- Keystore Management - Includes a secure local keystore for the encrypted storage and retrieval of third-party API keys.
- Secure Secret Storage - Includes a secure local keystore for the encrypted storage and retrieval of API keys and authentication tokens.
- Configuration Registries - Implements a centralized registry to synchronize proxy settings and user agents across all network modules.
- Headless Browsers - Integrates a headless browser engine to render dynamic web content for advanced data extraction.
- Open Source Intelligence - Full-featured framework for web reconnaissance.
- Reconnaissance - Automated open-source intelligence gathering and harvesting.
- Reconnaissance and Discovery - Full-featured web reconnaissance framework written in Python.
- Reconnaissance Tools - Modular web reconnaissance framework for OSINT.
- Network Reconnaissance - Automates OSINT gathering through a modular framework.
- Open Source Intelligence - Full-featured web reconnaissance framework for OSINT tasks.
- OSINT and Information Gathering - Framework for harvesting information from open sources.
- OSINT Tools - Framework for web reconnaissance and information gathering.
- Security And Forensics - Full-featured reconnaissance framework for security testing.
- Security Tools - Full-featured web reconnaissance framework written in Python.
- Web Security Testing - Framework for gathering OSINT during web reconnaissance.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
