name: recon-ng
category: recon
description: Full-featured web reconnaissance framework with modular design.
keywords:
  - recon
  - osint
  - framework
  - modules
  - intelligence
  - gathering

parameters:
  workspace:
    type: string
    flag: "-w"
    description: Workspace name

  resource:
    type: string
    flag: "-r"
    description: Resource file to execute

  module:
    type: string
    flag: "-m"
    description: Module to run

  check:
    type: boolean
    flag: "-C"
    description: Check modules

  global:
    type: boolean
    flag: "-g"
    description: Show global options

  version:
    type: boolean
    flag: "--version"
    description: Show version

requires_root: false
timeout: 0
interactive: true

examples:
  - "recon-ng"
  - "recon-ng -w target_workspace"
  - "recon-ng -r commands.rc"
  - "recon-ng -m recon/domains-hosts/google_site_web"

notes: |
  Common commands:
  - workspaces list/create/select
  - modules search/load/info
  - options list/set
  - run
  - show hosts/contacts/credentials

  Module categories:
  - recon/domains-*: Domain discovery
  - recon/hosts-*: Host enumeration
  - recon/contacts-*: Contact finding
  - discovery/*: Active discovery
  - exploitation/*: Exploitation
  - import/*: Data import
  - reporting/*: Report generation

  API keys:
  - keys add [name] [value]
  - Required for many modules
  - Shodan, VirusTotal, etc.

  Useful modules:
  - hackertarget: Subdomain finder
  - whois_pocs: Contact info
  - shodan_ip: Shodan lookup
  - google_site_web: Google dorking

  Workspaces:
  - Separate data per target
  - SQLite database backend
  - Export/import capability