Recon-ng - Generating Reports

Key Takeaways

[Music] hey guys hackersplight here back again with another video and welcome to the final video in the recon ng series so in this video as you guessed it we are going to be looking at how to generate uh reports now this is probably again one of the most important things and i know i've said that a lot of times during uh this series and the reason is generating a report is something that many beginners overlook but if you move into an enterprise type of scenario or if you're working for a company then you need to learn or understand how to generate a report or to display the data that you can understand you need to learn how to display that data so that corporate people or people with no technic technical knowledge of recon ng can understand you know you understanding it is fine but you need to make sure you can show other people the data so that they can understand it so uh the the great thing about recon ng and again it's just a fantastic framework and that's why i'm covering it on the channel is because it'll help you more than you think it will all right so i'm currently using my uh my default workspace and that's because i have a reasonable amount of data in here now you can see i have the final code the website and if i show my hosts i think i have the bbc subdomains yes all right so a reasonable amount of information now uh one of the commands that we looked at was the show uh dashboard now if you use if you've used your workspace and you've performed scans you've added host or domains by using the show dashboard command as i told you this is going to show you uh or give you a summary of all the modules that you've used as you can see i've used uh the recon the domains the built with module i've used the free guip the resolve and the showdown just as we used in this series it'll then tell you uh in terms of your results here what you're able to get so i got one domain uh location was one hosts were seven contacts was one so everything that we've done till now nothing has changed so the dashboard will show you a summary of information that is useful for you this information is still really weird to display uh you know for um for the people or people who are not really tech savvy you get the idea you need uh information or data that can be displayed and understood by everyone or anyone all right so uh what we do now is recon ng has its own set of modules that allow you to perform reporting or generation of reports and if we just search for them reporting you can see that it will display a table that contains all the different methods and formats in which you can report the data in now personally i'm not going to go through all of them because firstly they're pretty self-explanatory and you decide what what type of format you want to display the data in in my experience the best way to display the data is via html in the term of a web page because it will display all the data in a way that's very easy to understand you can also display the data in in a csv file which will as you know will be opened in a spreadsheet so you can also use that if you want there's also the json which i don't i have i don't really like using any of your xlsx extension which i'm sure you know what does and then you have your xml which is also quite nice for a simple presentation but for me i usually like sticking with the html uh but just for demonstration i'll show you how to use the uh the csv one first and we'll then go to the the html so we'll say use reporting and we use the forward slash and we say csv all right so i'm gonna hit enter and uh we can show the info here in regards to where the file will be saved so you can see uh the file will be saved in root recon ng workspaces default results dot cs csv so let me just open that up i'm already in my root directory i don't have uh i didn't create an account here so we're just going to look for the recon ng folder there it is workspaces and um we want to go to the default workspace and we're just gonna wait here all right so i'll generate the uh the csv file so you can specify the table in which you want to um the table in which you want to output data from so for me the only yes i'll only output host because that has the most amount of information that has the bbc sub domains okay so i just have to hit run all right and i'm gonna hit enter and as you can see seven records were added now if i open this directory i should find the csv file and there we are there we are going to open it up with the text editor so i don't have any type of um any type of office software here or any type of spreadsheet software that can open that so i guess you understand why that's uh an issue now but don't worry i was just showing you how to use the csv how to use a module for reporting now let's go back uh sorry about that uh for some reason uh my terminal isn't working all right there we are so back and uh we want to show uh reporting one more time and we're going to be using the uh sorry about that show our reporting like so and for some reason that oh search reporting sorry uh because we haven't added it to our shortcuts so uh what i'm going to do is i'm going to say use reporting and we're going to specify html okay so i'm going to hit enter and we're going to clear this now and we can show some information here um so in terms of uh the information you can add here is the the html report will generate everything the great thing i like about it and that's what i was talking about is the customization it offers you so you can add uh you know the creator name that will it will be attached to the footer of the webpage and you have the customer name which will be the header so you can add you know a company name so you can say for example we can say set uh customer we can just add a simple name let's see uh yeah why don't we use bbc so i'm gonna set the bbc and i'm going to set the creator to my name or we can say hack exploit as the company that performed this scan so i'm going to hit enter and the file name it's going to give you the the directory which is still going to be inside the default workspace you if you change the workspace i'm sure you get uh that you would have to change um your folder that we had open so i'm gonna hit run and it's gonna it's gonna generate the report and let's go back in here and we have the html file so i'm gonna open up open it up with firefox and voila you can see that we have all the information displayed beautifully bbc recon ng reconnaissance report and you have created by hack exploit on and the on thursday june 28th and you have the time right there it's pretty late at night but no worry and look how beautiful this is it displayed everything it displayed the domains that we added the locations the hosts were able to gather and the contacts but we we didn't get any contacts so remember the more information you gather the more this will be populated and this is what i'm talking about this is how a report is supposed to look like supposed to be in this in the form of data that is readable and understandable so yeah that is how to use recon ng for information uh information gathering uh obviously open source information gathering and uh i hope you enjoyed this series it was a short series that hopefully encapsulated everything that you needed to know to get started grasp recon ng and how to utilize it for your own scans all right there are plenty of modules out there that you can use for different types of scans and it's all up to you now in in terms of exploring it that being said that's going to be it for this video guys if you like this video found value in it please leave a like down below if you have any questions or suggestions let me know in the comments section or my social media and i'll be seeing you in the next video peace