Web interface for Recon-ng
"Recon-ng Web" is a web interface for recon-ng and uses "recon-rpc" to execute commands and fetch data.
Requirements:
- Recon-ng
- PHP
Setup:
./recon-rpc -t xmlrpc -a IP_ADDRESS -p PORT
Problems:
- Errors like "API Key not found" is not returned in response of RPC. Hence it is not shown in web interface.
- Some verbose data is not returned in response of RPC. Hence it is not shown in web interface.
- Raw response is shown in web interface. Future release will show response in tabular format and more organized.
Priority feature for next release:
File upload feature to allow uploading a file for input in "SOURCE" and other supported options.
We are trying to fix the problems and bring more features and ease of use.
IMPORTANT: Please don't use it in production because the source code has not been audited for vulnerabilities especially CSRF and XSS.