Recon-ng - Introduction And Installation Video Lecture | Get to know Ethical Hacking (English) - Software Development

[Laughter]
hey guys exploit here back again with
another video and apologize for the lack
of uploads as I mentioned in the
previous video I have started working on
new series for the channels and a new
direction for the channel we will be
moving on to a little bit more of an
advanced path now so welcome to the
first of the new series which is going
to be kind of a short series but a very
very helpful series and the reason I
created it will be apparent very very
soon when I explained that in this
series we are going to be looking at OS
int or open source intelligence
gathering with recon ng so you might be
asking yourself well why exactly are you
making this series well a lot of people
or a lot of business owners in
particular have contacted me on YouTube
and on my emails you know in regards to
open source intelligence that is
publicly available as I'm sure you
already know what OSI and T is but if
you didn't there you go and their
concerns were the weakest link for an
organization which is human beings not
the actual systems as you know systems
can be easily patched and protected by
seasoned penetration testers and by
different companies as you'd already
know you know and that is a different
tangent on its own but when it comes
down to the weakest link which as of as
I've mentioned is human beings and more
specifically employees in a company
finding these data leaks or information
that could could be very valuable to
black hats you know data like for
example emails email addresses which can
then be used for social engineering
attacks as we've seen this multiple
times you know with huge companies like
Sony whose emails have been leaked and
from then that stemmed on to social
engineering attacks being performed and
you know a certain amount of access was
gained to the company network you know
so on and so forth looking at these
different attack vectors is very very
important and it's also good to
understand that this is probably right
now the most valuable data as you have
probably heard in the news this year
with the release or with the
of leaked data from Cambridge analytical
you can see that it is personal
information that is publicly available
that is really really gold right now for
hackers and as I said with the
information gathering it's the the most
important link all right so we are going
to be using recon ng no recon ng is a
framework that in hindsight will
automate the process of gathering such
information and will present it or will
allow you to present this information in
an antastic format now what do I mean by
this as I said this information is
publicly available and finding it is the
best way of knowing where it's coming
from which you can then stop so for
example if I found out that my employees
were leaking company information on
their social networks or they were
taking pictures of you know the
operating systems they're using you know
not knowingly causing harm but you want
to know what exactly is happening and
how you can stop it
that would be how you'd find it now the
problem with OSI NT or open source
intelligence is it is extremely vast and
there are tons of sources are you know
at which blackhat hackers can can use
for this type of gathering for this type
of information gathering so that's why
we turn to recon ng which is one of the
best frameworks for OSI NT gathering
when it comes down to you know
automation the speed of the scans and
obviously the presentation of the
information that was gathered which is
very very important in an enterprise
situation or in an enterprise
environment that being said in this
series I'll be showing you probably the
most important things in regards to to
recon in job you know to get installed
I'll be showing you the commands getting
used to the interface which is what many
people have a problem with selecting
your workspaces separating your
workspaces for different projects
scanning targets selecting targets and
finally generating reports as to what
information you are able to gather in
this video I've already explained to you
what recon Ang's and its importance
we're going to be looking at the
installation process and I'll delve
deeper into that in a few seconds so as
I said
okay at the installation it currently
only works on Linux and the other thing
is it's open source it's completely free
to download and when it comes down to
the operating system that it does work
on it works only on Linux and you know
when it comes down to Windows you can
choose to run it on a virtual machine
through a Linux distribution or you can
if you're running Mac you can use the
docker platform to to use to use this
that being said the software
prerequisites are going to be only one
as the most important of course it has
its own requirements or dependencies
that need to be installed that's if
you're running a non penetration testing
distribution for example Ubuntu or Linux
Mint you know something to that extent
so you will require Python - and the
thing about Recon ng as of right now is
it requires and it only supports Python
- so if you're running Python 3 and you
say I do need Python - incorrect you
need to install Python - it is required
so I'm guessing that you are already
going to be running this on a
penetration testing distribution but if
you are running Ubuntu or another
distribution that does not have it
installed I will be posting this link in
the description it is the bitbucket
a link for recon ng and what you can do
is you can just clone this repository if
you want it to do that ok so by default
you can also use SH if you want but you
can copy this and you can clone it
wherever you want and the installation
is really very simple now I'm going to
launch it on my penetration testing
distribution right here so I've opened
up my terminal and to get it started all
you can type in is recon ng alright and
there we are it's going to give you
these errors if you start it for the
first time that you haven't added any
api's do not worry about this and do not
be concerned as to what it's asking you
for will be getting to all of that very
very soon now you can see we are in the
interface now and it is working as a
framework as you can see it offers a
fantastic range of options when it comes
down to you know selecting your
different targets etc etc
and now the most important thing is
going through the commands now again
this video is a short introduction to
what we're going to be looking at and
how to get it set up how to get it
started and the next video we're going
to be looking at the commands and an
overview of the interface and the
framework to get you up to scratch with
how to navigate around it and how to
start selecting the items that you want
and you know selecting the api's all
that good stuff that being said that's
going to be it for this video just a
short introduction getting you guys up
to up to scratch or up to date with what
exactly is going to go on in this series
again the other series will continue
simultaneously the exploit development
series etc all that good stuff and now
videos will be consistent and yeah
that's going to be it for this video
guys if you found value in this video
please leave a like down below if you
have any questions or suggestions let me
know in the comments section or my
social networks and I'll be seeing you
in the next video peace
[Music]