Recon-ng Modules


Module Name Module Path
DNS Cache Snooperdiscovery/info_disclosure/cache_snoop
Interesting File Finderdiscovery/info_disclosure/interesting_files
Remote Command Injection Shell Interfaceexploitation/injection/command_injector
Xpath Injection Brute Forcerexploitation/injection/xpath_bruter
Advanced CSV File Importerimport/csv_file
List File Importerimport/list
Jigsaw - Point Usage Statistics Fetcherrecon/companies-contacts/jigsaw/point_usage
Jigsaw - Single Contact Retrieverrecon/companies-contacts/jigsaw/purchase_contact
Jigsaw Contact Enumeratorrecon/companies-contacts/jigsaw/search_contacts
Jigsaw Authenticated Contact Enumeratorrecon/companies-contacts/jigsaw_auth
LinkedIn Authenticated Contact Enumeratorrecon/companies-contacts/linkedin_auth
Github Resource Minerrecon/companies-multi/github_miner
Whois Data Minerrecon/companies-multi/whois_miner
Bing Linkedin Profile Harvesterrecon/companies-profiles/bing_linkedin
MailTester Email Validatorrecon/contacts-contacts/mailtester
Contact Name Manglerrecon/contacts-contacts/mangle
Contact Name Unmanglerrecon/contacts-contacts/unmangle
Have I been pwned? Breach Searchrecon/contacts-credentials/hibp_breach
Have I been pwned? Paste Searchrecon/contacts-credentials/hibp_paste
PwnedList Validatorrecon/contacts-credentials/pwnedlist
Contacts to Domains Data Migratorrecon/contacts-domains/migrate_contacts
FullContact Contact Enumeratorrecon/contacts-profiles/fullcontact
Adobe Hash Crackerrecon/credentials-credentials/adobe
PyBozoCrack Hash Lookuprecon/credentials-credentials/bozocrack
Hashes.org Hash Lookuprecon/credentials-credentials/hashes_org
leakdb Hash Lookuprecon/credentials-credentials/leakdb
Meta Data Extractorrecon/domains-contacts/metacrawler
PGP Key Owner Lookuprecon/domains-contacts/pgp_search
SalesMaple Contact Harvesterrecon/domains-contacts/salesmaple
Whois POC Harvesterrecon/domains-contacts/whois_pocs
PwnedList - Account Credentials Fetcherrecon/domains-credentials/pwnedlist/account_creds
PwnedList - API Usage Statistics Fetcherrecon/domains-credentials/pwnedlist/api_usage
PwnedList - Pwned Domain Credentials Fetcherrecon/domains-credentials/pwnedlist/domain_creds
PwnedList - Pwned Domain Statistics Fetcherrecon/domains-credentials/pwnedlist/domain_ispwned
PwnedList - Leak Details Fetcherrecon/domains-credentials/pwnedlist/leak_lookup
PwnedList - Leak Details Fetcherrecon/domains-credentials/pwnedlist/leaks_dump
DNS Public Suffix Brute Forcerrecon/domains-domains/brute_suffix
Baidu Hostname Enumeratorrecon/domains-hosts/baidu_site
Bing API Hostname Enumeratorrecon/domains-hosts/bing_domain_api
Bing Hostname Enumeratorrecon/domains-hosts/bing_domain_web
DNS Hostname Brute Forcerrecon/domains-hosts/brute_hosts
BuiltWith Enumeratorrecon/domains-hosts/builtwith
Google CSE Hostname Enumeratorrecon/domains-hosts/google_site_api
Google Hostname Enumeratorrecon/domains-hosts/google_site_web
Netcraft Hostname Enumeratorrecon/domains-hosts/netcraft
Shodan Hostname Enumeratorrecon/domains-hosts/shodan_hostname
SSL SAN Lookuprecon/domains-hosts/ssl_san
VPNHunter Lookuprecon/domains-hosts/vpnhunter
Yahoo Hostname Enumeratorrecon/domains-hosts/yahoo_domain
Google Hacking Databaserecon/domains-vulnerabilities/ghdb
PunkSPIDER Vulnerabilty Finderrecon/domains-vulnerabilities/punkspider
XSSed Domain Lookuprecon/domains-vulnerabilities/xssed
XSSposed Domain Lookuprecon/domains-vulnerabilities/xssposed
Hosts to Domains Data Migratorrecon/hosts-domains/migrate_hosts
Bing API IP Neighbor Enumeratorrecon/hosts-hosts/bing_ip
FreeGeoIPrecon/hosts-hosts/freegeoip
My-IP-Neighbors.com Lookuprecon/hosts-hosts/ip_neighbor
IPInfoDB GeoIPrecon/hosts-hosts/ipinfodb
Hostname Resolverrecon/hosts-hosts/resolve
Reverse Resolverrecon/hosts-hosts/reverse_resolve
SSLTools.com Host Name Lookupsrecon/hosts-hosts/ssltools
Hosts to Locations Data Migratorrecon/hosts-locations/migrate_hosts
Shodan IP Enumeratorrecon/hosts-ports/shodan_ip
Address Geocoderrecon/locations-locations/geocode
Reverse Geocoderrecon/locations-locations/reverse_geocode
Flickr Geolocation Searchrecon/locations-pushpins/flickr
Instagram Geolocation Searchrecon/locations-pushpins/instagram
Picasa Geolocation Searchrecon/locations-pushpins/picasa
Shodan Geolocation Searchrecon/locations-pushpins/shodan
Twitter Geolocation Searchrecon/locations-pushpins/twitter
YouTube Geolocation Searchrecon/locations-pushpins/youtube
Whois Company Harvesterrecon/netblocks-companies/whois_orgs
Reverse Resolverrecon/netblocks-hosts/reverse_resolve
Shodan Network Enumeratorrecon/netblocks-hosts/shodan_net
Internet Census 2012 Lookuprecon/netblocks-ports/census_2012
censys.io port lookup by netblockrecon/netblocks-ports/censysio
Ports to Hosts Data Migratorrecon/ports-hosts/migrate_ports
Dev Diver Repository Activity Examinerrecon/profiles-contacts/dev_diver
Linkedin Contact Crawlerrecon/profiles-contacts/linkedin
Linkedin Profile Crawlerrecon/profiles-profiles/linkedin_crawl
NameChk.com Username Validatorrecon/profiles-profiles/namechk
OSINT HUMINT Profile Collectorrecon/profiles-profiles/profiler
Twitter Handlesrecon/profiles-profiles/twitter
Github Code Enumeratorrecon/profiles-repositories/github_repos
Github Gist Searcherrecon/repositories-vulnerabilities/gists_search
Github Dork Analyzerrecon/repositories-vulnerabilities/github_dorks
CSV File Creatorreporting/csv
HTML Report Generatorreporting/html
JSON Report Generatorreporting/json
List Creatorreporting/list
PushPin Report Generatorreporting/pushpin
XLSX File Creatorreporting/xlsx
XML Report Generatorreporting/xml