recon-ng to perform n/a reconnaissance on a target domain

----------------------------------------------------------

recon-ng
help
marketplace install all
-- some error at end:
*** like following
See 'keys add'.
[!] 'github_api' key not set. github_dorks module will likely fail at runtime. See
'keys add'.
[!] 'google_api' key not set. pushpin module will likely fail at runtime. See 'keys
add'.

modules search
workspaces
workspaces create CEH
workspaces list
db insert domains
domain: certifiedhacker.com
notes: (nothing) Press Enter
show domains
modules load brute
modules load recon/domains-hosts/brute_hosts
run
O/P:
autodiscover.certifiedhacker.com => (A) 162.241.216.11
blog.certifiedhacker.com => (A) 162.241.216.11 etc.
-------
SUMMARY
-------
[*] 22 total (19 new) hosts found.

back

modules load bing

modules load recon/domains-hosts/bing_domain_web
run
-------
SUMMARY
-------
[*] 2 total (0 new) hosts found.

modules load reverse

modules load recon/hosts-hosts/reverse_resolve
run
[*] Host: box5331.bluehost.com
[*] Ip_Address: 162.241.216.11
-------
SUMMARY
-------
[*] 1 total (1 new) hosts found.

show hosts
| | | | brute_hosts |
| 17 | webmail.certifiedhacker.com | 162.241.216.11 | | |
| | | brute_hosts |
| 18 | www.certifiedhacker.com | | | |
| | | brute_hosts |
 | 19 | www.certifiedhacker.com | 162.241.216.11 | | |
| | | brute_hosts |
| 20 | box5331.bluehost.com | 162.241.216.11 | | |
| | | reverse_resolve |

+----------------------------------------------------------------------------------
---------------------------------------------+

[*] 20 rows returned

back

modules load reporting

modules load reporting/html
options set FILENAME /root/Desktop/results.html
options set CREATOR John
options set CUSTOMER Certifiedhackers Networks
run
[*] Report generated at '/root/Desktop/results.html'.

Places -> Home Folder -> File System (left pane) -> root -> Desktop -> open
results.html in Firefox browser

recon-ng to gather personal information

-------------------------------------------

workspaces create reconn

workspaces list
modules load whois
modules load recon/domains-contacts/whois_pocs
info
options set SOURCE facebook.com
run
-----------
FACEBOOK.COM
------------
[*] URL: http://whois.arin.net/rest/pocs;domain=facebook.com
[*] URL: http://whois.arin.net/rest/poc/BST184-ARIN
[*] Country: United States
[*] Email: bstout@facebook.com
[*] First_Name: Brandon
[*] Last_Name: Stout
-------
SUMMARY
-------
[*] 2 total (2 new) contacts found.

back
# Validate the existence of names.
modules load name
modules load recon/profiles-profiles/namechk
info
options set SOURCE MarkZuckerberg
run

--Some error: Failed to establish a new connection

back
modules load profile
modules load recon/profiles-profiles/profiler
options set SOURCE MarkZuckerberg
run
-------
SUMMARY
-------
[*] 99 total (99 new) profiles found.

# After verification of user existence and profile URL, now prepare a report.
modules load reporting/html
options set FILENAME /root/Desktop/reconn.html
options set CREATOR John
options set CUSTOMER Mark
run