// what it is
Description
Tim Tomes' modular recon framework — looks like msfconsole, but every module is an OSINT pull rather than an exploit. State is stored in a SQLite workspace, so you can run dozens of modules and pivot between results.
// use cases
What people use it for
- Stateful, repeatable OSINT runs
- Building a reconnaissance corpus before a phishing campaign
- Pivoting between hosts/contacts/credentials across modules
// commands
The commands you'll type
Start a workspace
$ recon-ng -w target_projectMarketplace install module
$ marketplace install recon/domains-hosts/hackertarget