security enabled verified low v1.0.0

recon-ng

Full-featured reconnaissance framework with modules for OSINT, social engineering, and target profiling across dozens of data sources.

📋 Live Preview

recon-ng -w {workspace}

🌍 workspace → default

recon-ng -w {workspace}

Sandbox: execFile · Timeout: 3600s

Capabilities

security.intel.osint

security.recon.passive

security.recon.framework

security.intel.email

network.discovery.subdomain

security.intel.contact

security.intel.geolocation

Parameters

Name	Type	Required	Default	Description	Aliases
`flag-w`	string	No	-	Load/create a workspace	`-w`
`flag-r`	file	No	-	Load commands from a resource file	`-r`
`no-version`	boolean	No	-	Disable version check	`--no-version`
`no-analytics`	boolean	No	-	Disable analytics reporting	`--no-analytics`
`no-marketplace`	boolean	No	-	Disable remote module management	`--no-marketplace`
`stealth`	boolean	No	-	Disable all passive requests	`--stealth`
`accessible`	boolean	No	-	Use accessible outputs when available	`--accessible`
`h`	boolean	No	-	show this help message and exit	`-h`, `--help`
`no_analytics`	boolean	No	-	disable analytics reporting	`--no-analytics`
`no_version`	boolean	No	-	disable version check	`--no-version`
`version`	boolean	No	-	displays the current version	`--version`

Artifacts

Type	Description	MIME	Schema	Trust
`security.recon.report`	Reconnaissance report and collected intelligence	text/html	-	community
`security.recon.workspace`	Recon-ng workspace database	application/octet-stream	-	verified

Contract

Inputs

network.target.domain

Target domain name

security.target.company

Company name for profiling

Outputs

security.recon.report

Reconnaissance data

Side effects: network_trafficnetwork_traffic

Workflow Edges

Produces

security.recon.report

Consumes

network.target.domainsecurity.target.company

Resource Profile

Resource	Value
CPU	medium
Memory	128 MB
Network	medium
Disk I/O	low

Examples

Launch recon-ng with a specific workspace

recon-ng -w target-company

Run commands from a resource file

recon-ng -w target-company -r commands.rc

Launch in stealth mode (no passive requests)

recon-ng --stealth

Interactive mode — create workspace and load modules

recon-ng -w example

Marketplace module search via CLI args

recon-ng --no-marketplace

Documentation

Recon-ng — Reconnaissance Framework

Recon-ng is a powerful web reconnaissance framework that provides an interactive environment for open-source intelligence gathering. It features a modular architecture with modules for contact discovery, domain enumeration, credential harvesting, geolocation, and more.

Framework Architecture

Workspaces: Isolate reconnaissance data per target
Modules: 100+ modules organized by category (discovery, exploitation, import, recon, reporting)
Marketplace: Download community modules
Reporting: Generate HTML, CSV, and other report formats

Interactive Usage

$ recon-ng -w target
[recon-ng][target] > marketplace search shodan
[recon-ng][target] > modules load recon/domains-hosts/shodan_hostname
[recon-ng][target][shodan_hostname] > set SOURCE example.com
[recon-ng][target][shodan_hostname] > run