Recon-ng-hackertarget: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 1: | Zeile 1: | ||
=after start recon-ng= | =after start recon-ng= | ||
| − | + | *[recon-ng][default] > use recon/domains-hosts/hackertarget | |
| − | [recon-ng][default] > use recon/domains-hosts/hackertarget | ||
[recon-ng][default][hackertarget] > show info | [recon-ng][default][hackertarget] > show info | ||
| Zeile 9: | Zeile 8: | ||
Author: Michael Henriksen (@michenriksen) | Author: Michael Henriksen (@michenriksen) | ||
| − | Description: | + | Description: |
| − | + | Uses the HackerTarget.com API to find host names. Updates the 'hosts' table with the results. | |
| − | Options: | + | Options: |
| − | + | Name Current Value Required Description | |
| − | + | ------ ------------- -------- ----------- | |
| − | + | SOURCE default yes source of input (see 'show info' for details) | |
| − | Source Options: | + | Source Options: |
| − | + | default SELECT DISTINCT domain FROM domains WHERE domain IS NOT NULL | |
| − | + | <string> string representing a single input | |
| − | + | <path> path to a file containing a list of inputs | |
| − | + | query <sql> database query returning one column of inputs | |
| Zeile 29: | Zeile 28: | ||
SOURCE => tuxmen.de | SOURCE => tuxmen.de | ||
*[recon-ng][default][hackertarget] > run | *[recon-ng][default][hackertarget] > run | ||
| − | + | <pre> | |
| − | |||
------- | ------- | ||
| Zeile 67: | Zeile 65: | ||
[*] [host] relay-ext.suse.de (195.135.221.8) | [*] [host] relay-ext.suse.de (195.135.221.8) | ||
</pre> | </pre> | ||
| + | |||
| + | *[recon-ng][default][hackertarget] > show keys | ||
| + | <pre> | ||
| + | +--------------------------+ | ||
| + | | Name | Value | | ||
| + | +--------------------------+ | ||
| + | | bing_api | | | ||
| + | | builtwith_api | | | ||
| + | | censysio_id | | | ||
| + | | censysio_secret | | | ||
| + | | flickr_api | | | ||
| + | | fullcontact_api | | | ||
| + | | github_api | | | ||
| + | | google_api | | | ||
| + | | google_cse | | | ||
| + | | hashes_api | | | ||
| + | | ipinfodb_api | | | ||
| + | | jigsaw_api | | | ||
| + | | jigsaw_password | | | ||
| + | | jigsaw_username | | | ||
| + | | pwnedlist_api | | | ||
| + | | pwnedlist_iv | | | ||
| + | | pwnedlist_secret | | | ||
| + | | shodan_api | | | ||
| + | | twitter_api | | | ||
| + | | twitter_secret | | | ||
| + | +--------------------------+ | ||
| + | <pre> | ||
| + | |||
| + | *[recon-ng][default][hackertarget] > keys add shodan_api xxxxxxxxxxxxxxxxxxxxx | ||
| + | |||
| + | *[recon-ng][default][hackertarget] > show keys | ||
| + | <pre> | ||
| + | +-----------------------------------------------------+ | ||
| + | | Name | Value | | ||
| + | +-----------------------------------------------------+ | ||
| + | | bing_api | | | ||
| + | | builtwith_api | | | ||
| + | | censysio_id | | | ||
| + | | censysio_secret | | | ||
| + | | flickr_api | | | ||
| + | | fullcontact_api | | | ||
| + | | github_api | | | ||
| + | | google_api | | | ||
| + | | google_cse | | | ||
| + | | hashes_api | | | ||
| + | | ipinfodb_api | | | ||
| + | | jigsaw_api | | | ||
| + | | jigsaw_password | | | ||
| + | | jigsaw_username | | | ||
| + | | pwnedlist_api | | | ||
| + | | pwnedlist_iv | | | ||
| + | | pwnedlist_secret | | | ||
| + | | shodan_api | xxxxxxxxxxxxxxxxxxxxx | | ||
| + | | twitter_api | | | ||
| + | | twitter_secret | | | ||
| + | +-----------------------------------------------------+ | ||
Version vom 10. November 2018, 16:08 Uhr
after start recon-ng
- [recon-ng][default] > use recon/domains-hosts/hackertarget
[recon-ng][default][hackertarget] > show info
Name: HackerTarget Lookup
Path: modules/recon/domains-hosts/hackertarget.py
Author: Michael Henriksen (@michenriksen)
Description: Uses the HackerTarget.com API to find host names. Updates the 'hosts' table with the results.
Options: Name Current Value Required Description ------ ------------- -------- ----------- SOURCE default yes source of input (see 'show info' for details)
Source Options: default SELECT DISTINCT domain FROM domains WHERE domain IS NOT NULL <string> string representing a single input <path> path to a file containing a list of inputs query <sql> database query returning one column of inputs
- [recon-ng][default][hackertarget] > set SOURCE suse.de
SOURCE => tuxmen.de
- [recon-ng][default][hackertarget] > run
------- SUSE.DE ------- [*] [host] suse.de (130.57.5.70) [*] [host] cc-s390x-kvm1.suse.de (195.135.221.74) [*] [host] smtp1.suse.de (195.135.220.23) [*] [host] director1.suse.de (195.135.220.21) [*] [host] cloud-dev1.suse.de (195.135.221.78) [*] [host] mx1.suse.de (195.135.220.2) [*] [host] mail2.suse.de (195.135.221.8) [*] [host] cc-s390x-kvm2.suse.de (195.135.221.79) [*] [host] smtp2.suse.de (195.135.220.24) [*] [host] director2.suse.de (195.135.220.22) [*] [host] mx2.suse.de (195.135.220.15) [*] [host] cantor3.suse.de (195.135.220.16) [*] [host] mx3.suse.de (143.186.213.3) [*] [host] mx4.suse.de (143.186.213.4) [*] [host] hydra.suse.de (195.135.221.167) [*] [host] opentc.suse.de (195.135.221.137) [*] [host] freeipa-opensuse.suse.de (149.44.161.62) [*] [host] gate.suse.de (195.135.221.12) [*] [host] turing.suse.de (195.135.220.3) [*] [host] storage-ci.suse.de (158.69.69.166) [*] [host] practicum.suse.de (130.57.14.222) [*] [host] imap.suse.de (195.135.220.8) [*] [host] aruba-rap.suse.de (195.135.221.3) [*] [host] ftp.suse.de (195.135.221.132) [*] [host] skylla-router.suse.de (195.135.221.1) [*] [host] soliddriver.suse.de (149.44.170.31) [*] [host] director.suse.de (195.135.220.20) [*] [host] visit.suse.de (195.135.221.17) [*] [host] munin-ext.suse.de (195.135.221.11) [*] [host] charybdis-ext.suse.de (195.135.221.2) [*] [host] relay-ext.suse.de (195.135.221.8)
- [recon-ng][default][hackertarget] > show keys
+--------------------------+ | Name | Value | +--------------------------+ | bing_api | | | builtwith_api | | | censysio_id | | | censysio_secret | | | flickr_api | | | fullcontact_api | | | github_api | | | google_api | | | google_cse | | | hashes_api | | | ipinfodb_api | | | jigsaw_api | | | jigsaw_password | | | jigsaw_username | | | pwnedlist_api | | | pwnedlist_iv | | | pwnedlist_secret | | | shodan_api | | | twitter_api | | | twitter_secret | | +--------------------------+*[recon-ng][default][hackertarget] > keys add shodan_api xxxxxxxxxxxxxxxxxxxxx *[recon-ng][default][hackertarget] > show keys+-----------------------------------------------------+ | Name | Value | +-----------------------------------------------------+ | bing_api | | | builtwith_api | | | censysio_id | | | censysio_secret | | | flickr_api | | | fullcontact_api | | | github_api | | | google_api | | | google_cse | | | hashes_api | | | ipinfodb_api | | | jigsaw_api | | | jigsaw_password | | | jigsaw_username | | | pwnedlist_api | | | pwnedlist_iv | | | pwnedlist_secret | | | shodan_api | xxxxxxxxxxxxxxxxxxxxx | | twitter_api | | | twitter_secret | | +-----------------------------------------------------+