Recon-ng - Commands; Workspaces And Data Management Video Lecture | Get to know Ethical Hacking (English) - Software Development

[Laughter]
hey guys hackers Floyd here back again
with another video and welcome back to
the OS int gathering course with recon
Angie alright so in this video I'm gonna
be looking at the commands that you can
use we're going to be looking at
workspaces how to add new workspaces and
we're gonna be looking at data
management and how data is managed with
recon ng because as I said it is quite
an advanced it's quite an advanced data
management system and it's very
important to understand how data is
stored so that you don't run into issues
later on that being said let's get
started so I already have recon Angie
opened up and started and as you can see
I have recurrently opened if you haven't
started yours it's really very simple to
launch it just type in recon ng or you
can browse to the directory in which you
have it saved and install it that's if
you're running a Linux distribution that
is not oriented towards penetration
testing all right so before we get
started I just want to explain the
structure of recon ng alright so recon
Angie has modules very similar to
Metasploit alright now you might be
asked yourself well what are these
modules
well these modules are essentially
scripts that will perform a certain
action alright so in this case there's
they're gonna be scripts that will
perform a a scan on your own the target
or the company that you've specified
that's what it is really really simply
now let me explain the structure here
you can see that when I've started up
recon ng you have this default here this
is specifying the workspace so right now
we're using the default workspace
alright let me just make that clear
now the first command I just want to
show you is this show command alright so
the show command will enumerate or show
you all the data the database tables
that you can use to fill in information
in regards to your target let me explain
what I mean by clicking on it so if I
type in show and it's gonna essentially
display some information that I can use
and this might be a little bit confusing
but don't worry so again it's saying I
can use show
as you can see it saying usage use show
with any of these other database debase
tables so show banner show companies
show contact so show credentials so this
is all information that you can add in
regards to the company or the
organization that you want to perform
the scan on so let's say I wanted to
show the the domains of a company or the
domains that I currently have it will
show me that the domains that have saved
to the database but we don't have any
and I'll show you that right now so if I
said show domains you can see that it'll
say no data return because we haven't
added any so that brings us to the next
command the add command all right very
very important so before we actually go
into adding information let's take a
look at some other important information
which is the dashboard if Falls to say
show dashboard this will essentially
tell you that this workspace has no
record of activity the dashboard is very
important because the dashboard will
show you all current activities or tasks
that were performed all right on this
workspace workspace is essentially a
separate a separator that you can use
for organization you know of your scans
ok so and we are using the default
workspace now you might be curious as to
you might be curious and you might be
thinking to yourself well we are using
the default workspace but can I add a
new one of course you can so let's clear
that by the way you can use the clear
command if you want alright let me just
let me just adjust myself here guys all
right excellent so getting back to
adding a workspace to add it it's really
very simple all you need to do is you
need to use the command workspace
because we're specifying workspace
remember if I type in show you can see
that we have workspaces right here so
that the command we used is workspaces
workspaces alright and we say add
remember we specified the table name
which is workspaces then add when we're
adding modules or adding information to
any of these we use the add command
first
alright so workspaces add and we can add
a new workspace so we can let's say
workspace 1
right that's my own name you can name it
whatever you want whatever you're
comfortable with and I hit enter
all right give it a few seconds don't
worry if it gives you the API errors
that is very very common and it might be
a bit a little bit irritating but don't
worry so you can see that let me just
clear this up
you can see that it's changed our
different working workspace to workspace
one the workspace that we just created
so if I was to you know be false to type
in let's see if I was to just I've been
show and then I say show you can see
that if I say show workspaces we there's
no show us that we have our default one
and we have our workstation and a
workspace one okay so you can see it's
stored nicely in a database that you can
also later on access and it will display
the information really really well
okay so we've added our workspace now in
the file structure off off recon ng you
can see that if I open up recon ng here
you might be a little bit confused as to
all data stored and I'll be explaining
that in later videos but you can get a
bit of an idea as to how data is being
stored if you look at the the Recon ng
folder that exists in the user share
recon ng folder you know all that good
stuff but we'll be looking at that later
right now don't worry about this folder
the reason I showed you that fold is
because that's where your reports will
be generated okay
that being said now we can actually move
on so we have looked at how to add
workspaces we can add as many as you
like and you can do whatever you want
now what if we wanted to switch our
workspace back to the default one which
is the one that we were given to do that
we use the we use the what's that
command can we say select the default
workspaces select default and then let
me just do that right now workspaces
remember we we always select the table
for the table first so works but
workspaces and we say select default so
that's a new command that you should
know and so the Select command is going
to be very very very very common to what
we have met with Metasploit as you might
have noticed the commands are very very
similar
to what we have Metasploit all right so
once it's a default it's going to take
us back to our default workspace and
again it'll give you this API errors but
don't worry about that it's not gonna
affect anything all right so now we need
to add some information about a target
let me actually show you an example of
how a scan can be performed with modules
now have I actually shown you any
modules well if I was to just show you
modules here that exist and well
actually the the best way of doing this
is actually me showing you how to use
one of these these modules so if I say
show modules alright so show modules
these are all the modules that will
perform tasks you might be asking what
do you mean can you clarify that a
little bit well this are essentially
similar to what you have the Metasploit
they perform a specific task so you can
see this module right here for example
will will will look at locations and we
look at reversing the geo code all right
then we then have for example location
pushpins Twitter this will essentially
given the information that you would
need to provide like a Twitter Twitter
username this will essentially try and
grab the information in regards to where
this Twitter user has been moving in
terms of their location all right so
let's say you wanted to you wanted to
use the net the net blocks here so if
you have performed information gathering
before you know that Netflix offers
fantastic Whois information and that's
what we're gonna be using okay
so I'll show you how to do this with a
simple example so let me clear that up
and let's say now we are performing a
scan on let me just decide a company or
a website that that's open source let me
just think of one we can actually just
use mmm let me just decide sorry about
this guys we can just use BBC I think
that would be much better and BBC is the
British Broadcasting Corporation so what
we would do is if we show let's look at
what information we would need to add so
let's say we wanted to add domains
because that's the most important thing
right now because we are going to
perform who is a who is scan on our
domain so I'm going to say
at domains that's the command that you
need to use to add to add value to a
certain table so ad domains and once I
hit enter it's going to ask me to add
the domain so in this case I'll just hit
bbc.com alright and that is the domain
simple as that once 8 enter it's gonna
say fantastic so now if I say show
domains you can see that BBC is added
now we let's say we wanted to add
companies alright so companies right
here so come companies and we would say
we'll just call it BBC and I'm gonna
enter in description we'll just call it
news agency of course that's not an
accurate description again you know I'm
just showing you how to go about using
this so once I've set the description
awesome so we have set some pretty good
information here and if I just say show
companies you can see we have BBC it's a
news agency and you can now see how
important recon ng is in terms of
sorting your data out and how it's
displayed to you in your instead of
browsing with your browser manually
performing Louise checks you can always
set your company Z and perform mass
amounts of scans as we'll be looking at
okay so now we need to select a module
that we want to use so we can use the
search command let's say order to
perform a who is you know who is scan so
I'm going to search for who is just to
display what modules exist in regards to
who is so I'm going to say search who is
and as you can see we have recon right
here this is the one I want to use we
can use the let's see net blocks
companies who is we can actually use the
point of contacts right here so let's
actually use that one so we'll say we'll
say use who is and we can say P o SC
pocs alright so that will generate a
contact information in regards to our
target so let me just clear that up and
as you can see now it's specified the
module that we are using and now you
might be asking well is if if it is
similar to Metasploit can we use these
show options comment to display
information that we can change in
regards to our target well yes we can
and
the command is slightly different
instead of using show options we use
show info and that will display the
module information and it will display
the author the description of what it
does and the source which we have set by
default it's going to use the default
domains if you have added more than one
domain or company it will ask you to
specify ok so right now we don't need to
change anything and we'll be looking at
changing all of this but for now don't
worry don't over complicate stuff all we
need to do now is hit run and once I hit
run you can see it's gonna start running
the Whois scan on our domain right here
which is PVC comm and immediately it's
gonna start gathering information so
let's see what information it was able
to gather so you can see we've got an
email right here we've got Justin Van
Abraham's we have Charles Keating and
it's email so again you can see how
information this is you have Craig fancy
and you get the idea performing these
scans is now a whole lot better and this
is why I recommend using recon ng4 you
know OS int gathering because this is a
fantastic very very comprehensive tool
that will really really you know give
you a professional edge when it comes
down to to to information gathering all
right that being said that's gonna be it
for this video in the next video we'll
be looking more advanced commands and
some more data management but that being
said that's going to be it for this
video I hope you liked this video found
value in it if you did please leave a
like down below if you have any
questions or suggestions let me know in
the comment section
or my social networks and I'll be seeing
you in the next video peace
[Music]