Recon-ng V5 - Adding API Keys (Shodan & BuiltWith)

Key Takeaways

[Music] hey guys welcome back to the recon ng version 5 series uh in this video we're going to be talking about apis in recon ng and yeah so let's get started uh without any further ado so first of all i just want to let you know that i've saved my showdown api key here and for those of you will be warning me in the comments section that it's a dangerous thing to expose i will have already reset my api key after i finish recording this video uh then we also have built with right so i have my built with domain api right over here so we'll be going through the very showdown and built with modules and how to add the various api keys here okay so let's get started so first of all if i type in help you can see we have the uh where is it we have the keys option here so this uh essentially allows you to manage third-party resource credentials right so a good example of this would be showdown you know you require an api uh that will then allow you to uh to actually access their their search engine to you know perform queries of whatever sort uh you know ones that are dictated by them by the module that you in you will install here so uh what we're gonna do is uh we are gonna if we say keys right and you can then take a look at the options we can list the keys that we have we can remove an ad etc etc but an easy way of doing this is by taking a look at the module we're going to be dealing with so let's talk to let's get started with showdown first of all right so we're essentially going to say marketplace uh search and we're going to look for showdown modules uh that uh you know related to showdown so an interesting one here is the domains uh hosts uh module which is again the showdown host name here we also have the showdown ip and you can you can note something very important that they all require the api key integration and that is noted by the asterisk here for each of them uh they're currently updated uh you can see in 2019 which is great um so we can also take we also have the push pins um netblocks uh uh we showed a net uh so we'll first of all try the the showdown host name here so we'll copy this and uh what we'll do is again we'll just simply install it marketplace install and we'll paste in the relative path here you can see that it will tell us we have an error that is denoted by an exclamation mark within the brackets so showed an api a key was not set showed in hostname module will likely fail at runtime so in order to add it we say keys add and then we can use the tab autocompletion and that will say showdown api do you want to specify the api key for showdown api and we say yes and then we want to get the the actual api here i'm going to copy my showdown api and we specify it right over here and we hit enter all right so now it's added the showdown api key excellent so now we can say modules uh modules load and we're looking for the showdown so that is right over here so there's also recon domains and hosts and we're looking for showdown host name load this if we take a look at the information here we can see we have this will harvest hosts from the showdown api by using the host name search operator and this will update the hosts table important information there we can limit the amount of api requests per input source so zero is unlimited and one is i've just currently set the value to 1 because i because i want to demonstrate something you can see i also set my source here so what we'll do is we'll say options on unset and we'll say unset the source here and we'll clear that out and uh let's just display the info one more time and let's uh let's actually get started so we're gonna say options set uh yeah we wanna set this and we wanna set the source here and the source is gonna be uh bbc info uh sorry bbc.com not bbc info when hit enter that's going to set the source um so we can now hit run and you can see it's going to search the showdown api for the hostname bbc.com so we're just gonna let this run and immediately you can see we have a lot more results than any of the other search engine engines we were using so this shows you the power of showdown first of all and secondly the power of recon ng thirdly the power of the of the showdown hostname module so uh you can see um we have the ip address uh the uh the port which gives us some ideas to the protocol we're dealing with here so we have mail.bbc uh we have various various domains and host names here um so we can go through this one will be generating reports we have 55 total seven new hosts found uh and you can see that um we get the various uh the various domains here but that's besides the point so that's essentially how to use the show that api key how to add it and then how to use it in conjunction with a module right now i'm not going to be talking about the showdown modules let's take a look at build with because i also had a few options with built with so we'll say marketplace search and we're looking for built with because it's it's a great module that allows you to uh to build a profile of the various web technologies that are used on a website so for example it'll allow you to tell if a website is using a cms like wordpress or like joomla etc you get the idea you can also see that this requires an api key integration here so we're just going to copy the relative path again same syntax marketplace install uh and we want to paste in the relative path that is going to install it it's going to give us the same error telling us that the built with api key was not set uh so the built with module will likely fail etc so you can say keys add and we can use the tab auto completion and we say we want to specify the build with api here so i'll just go into my browser and we'll copy this api let me just refresh this so that i think i'd reset it before so let's just copy it one more time and by the way i'll put a link in the description to where you can sign up for build with it's absolutely free and you have some free credits that you can use so we have added the built with api so if we say keys sorry where you say keys we can say list the keys that we have so you can see we have the built with api keys we have the showdown api key added here so again we can look we say modules load and we're looking for the built with module here so that is also another recon module let me just paste in the relative path here and the module we're using so we can see it is set now uh so you can see this leverages the built with api to identify hosts technologies and contacts associated with a domain interesting stuff so again this uh the first option we have here is unique so that is the show or option that allows us to display the technologies and we want to set the value to true so this will show us all the the technologies that are currently using secondly is the source so let me just unset this um i'm going to say source that is the source there and we can now set the option one more time and so we're going to say options uh set and i'm gonna say source this is the source here and bbc.com hit enter and uh we can now hit run and i had a few issues with this module so you can see it really doesn't display any options now i don't know whether this is a problem on my end but again if we take a look at the uh overview here uh we can see that the built with api uh you can see if i take a look at my usage here i have pretty much zero requests uh since the beginning of me since the beginning of me uh actually opening this account so uh you can see that uh we have the domi the domain api and we also have the free api so this is the one i've been using so the free api is really limited to one request per second if you're not purchased api uh credits so again we if we take a look at the um i think i'll take a look at the tools uh the domain uh what are my current credits if i say buy credits here uh let's see how many current it doesn't tell me how many credits i currently have uh so let me just go back into my usage here uh so nothing here so maybe it's just a problem with my account where i don't have enough uh i don't have enough credits but let me know how it goes with you guys it's a great uh it's a great module and that's why i've covered it in this video again you can get the browser extension as well that works just great but again this this can be this can be used to automate the process of gathering that information and all be useful in building a report all right so that's pretty much all i wanted to cover in this video now there are plenty of other modules that require an api uh you know one of them is bing so you can search for those modules and you can go through them so again we just go back and we can say marketplace search if we hit enter you can see the various ones here that require an api like twitter for example really great stuff uh so we can get push pins uh for both twitter youtube so they all require an api integration so we have bing let's see which other one we have we have virus total so you can go through all of them uh hopefully i've covered how to uh you know how to use keys and how to integrate them with recon ng uh by the way if you want to delete a key so we say keys and we'll say remove and we specify the name here so we can remove the build with api key and they'll get that will get rid of it all right if you want to get rid of a particular module let me just end with that so we can say marketplace um or we can actually use modules but let me just show you so if we type modules right so you can see we can only load reload and search for one if we hit marketplace we can pretty much install and uninstall them from the marketplace so we say marketplace remove remove and we can use the tab auto completion this gives us an idea of all the modules we have installed we want to get rid of the built with module again just copy the entire name and relative path hit enter that's going to remove the module and you know so on and so forth so that's pretty much going to be it for this video in the next video we'll be talking about interacting with the database and generating reports [Music] you