Recon-ng
Recon-ng is a free modular OSINT framework used to gather web-based open source intelligence on people and hosts for investigators and recon teams.
0 upvotes · 0 downvotes
No ratings yet
- Category
- OSINT & Reconnaissance
- Pricing
- Free
- Platforms
- LinuxWindowsmacOS
- License
- Open source
- Reviewed
- Last reviewed 25 October 2026
- Links
- GitHub
What it is
A Python framework with a console similar to Metasploit that runs marketplace modules against public web sources. Results land in a workspace database you can query and export.
What it helps with
- Collecting hosts, contacts, and credentials from public sources
- Chaining modules so one finding feeds the next
- Storing API keys once and reusing them across modules
- Exporting workspace data for reporting
Who it's for
OSINT investigators, pentesters, and analysts researching targets with open sources.
Worth knowing
Modules are installed from a marketplace inside the console, and many need third-party API keys. Docker is the recommended way to get the full web API experience.
Does it exploit targets?
No, it is built only for web-based open source reconnaissance, not exploitation.
What else should I use with it?
In our view theHarvester and Amass cover related host and contact discovery, and Maltego is useful when you want a graph view.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.