Recon-ng V5 - Web Interface

Key Takeaways

hey guys hackersploit here back again with another video i just wanted to make a quick uh addendum to the recon ng version 5 series um so as some of you will know uh the the tutorial playlist uh on hacker split regarding recon ng version 5 or is actually featured on the recon ng the recon ng wiki here on github so if i just go into the wiki and we take a look at the videos uh you can see that we have the the tutorial playlist featured here so i actually contacted the developer of recon ng where i submitted the tutorial playlist and it's been it's been really really really good speaking to the to the developer and he actually pointed out the fact that i missed demonstrating one of the key features with version five and that was the web interface in that it allows you to actually uh display or to to actually illustrate your the results that you have in a uh you know in a user in a user-friendly manner in a web interface so you can actually manipulate or work around with your data through a web interface which is uh really uh really really helpful so i thought why not actually just add this as an addendum so that i can actually have that uh you know covered and any other future updates will also be treated as such so without further ado let's get started so the first thing i'm going to do is i'm going to just going to recon ng because um [Music] uh i believe i have some data in there from a previous tutorial series but in any case what we can do is we can just start enumerating or collecting some some you know some data so that we can actually take a look at how this will be displayed in the web interface right so uh if i take a look at the db uh if i just schema uh we can see that we have uh the we have the hosts the ports um and the various websites and the domains all right so uh what i want to do now is let me let me see if i can actually load a module so modules load and uh let's see what modules we have here let's start off with uh we can actually try domains say brute hosts and what we can do now uh or let's try netcraft will that work i'm not really sure um i was testing that one so let me just list the options here um so we set that to hs plate already uh if i run this let's see if this module actually works all right so so that doesn't work um modules load let's see which one works let's try the who is miner um so that is a company's multi and who is miner and uh we'll say uh options list and we're gonna say say options set uh source and we can set this to split.com uh just to keep things really simple and now later on and that that gives us no information primarily because there is no who is information there um so i think we can perform uh let's see let's see what else can we do now marketplace uh marketplace let's actually go back here say marketplace search and let's search for um domains sorry that is domains like so um so we tried brute hosts and uh we can we can actually just stick with the results we have but let's see if we have any other modules here that we can use nothing important there let's try dns so yeah that's very very simple so what i'll do is i'll just say modules load and i will load the brute hosts because i know that works um so brute host and we'll say options set uh source and we'll say bbc.com i'm going to run and we're going to let that run and enumerate some sub domains uh so there we are i think that's plenty as well terminate the scan there and i'll exit now so in order to access the web the web interface for recon ng you want to navigate into your user share and your recon ng directory after which you'll find the recon web executable or the binary here so we can just uh launch it uh very simply by you know typing in recon web and hit enter so you'll see it'll tell you that it's now running on a local host on port 5000 so we can open that link in firefox and there we are so this is the web interface now the web the web interface is a means of managing the data that you have or you have collected with recon ng and also displaying it in a meaningful sense so it actually allows you to work with your data and understand what's been collected exactly it's very it's quite different than than a report because the report is quite static in what you can see you can also generate or export the the data looking at as a report here so i'll show you that in a second so if i click on the for example hsplate.com and i go into the domains or the hosts sorry and uh let's see if we can actually uh do we have the filter here um or we click here say hosts and do we have any any information here selected table let me just refresh that so uh i'll just go say default you say host for example there we are all right sorry um so this is typically going to do with hsploit and bbc right so i can use the fields and the filter right over here to actually display what i want to see so you know i can get rid of latitude longitude uh the country and you know if i say filter you can see it filters out the the results for us and i can also get rid of the module because that might not be something that you're interested in and the region might be very very important but typically this is quite uh good data here that we can use so you can see that it displays in the case of the hosts what we have now i don't have any company data no contacts credentials the only data you can see that in regards to the modules these are the only modules we have and the amount of times it's been run uh so for the hosts we have the standard data that we just collected uh the locations if we did have locations that would be stored there so you can go through the entire database here and these are the tables and then you can of course filter through the fields and you can then export the data into a json file xml csv list xlsx or you can use the proxy which uses an api which i'll probably cover how to use that but that's that that's very very interesting um so if i go into the hosts uh the host table here and let me just filter what i want so i can get rid of all of this and i can just say filter and if i wanted to export it as csv i can say export that as csv and we can save that and if i open this up with libreoffice i will actually open it up as a txt you you get the idea you cannot process your your data in various formats with the tables and the fields you've selected so again i can also export it as as any other file like a list here and that gives you what you're looking for so on and so forth um so that's pretty much all that i wanted to cover it's sort of like a very brief addendum to the rikon ng series but it's something that is worth covering because it is a feature of the script or of the framework um so do let me know what you guys think if you have any comments or suggestions i would love to hear them and i'll be seeing you in the next video [Laughter] peace