Anyone use Recon-ng? Is it beter than Metasploit? Why?
-
XSS.stack #1 – первый литературный журнал от юзеров форума
Recon-ng vs Metasploit
- Автор темы l0rdjho23n
- Дата начала
They both do different things..
Metasploit is an exploitation framework with various tools used in social engineering, obtaining installs, keeping persistence, and interacting with your targets.
Recon-ng is an OSINT framework for discovering information on your target pre-exploitation or for other purposes such as location, host correlations, etc.
SQLMap , WPScan , and Maltego are other tools you should also learn about.
SQLMap helps you identify and perform SQL injections on vulnerable hosts to interact with databases to manipulate them to do your bidding such as dumping themselves or adding new users.
WPScan is similar but works on WP Sites. It attempts to find vulnerabilities, exploit them, and interact with databases or the host itself.
Maltego is for mapping out your data so you can better visualize all the points or information you have identified on your targets.
I hope this helps.
Metasploit is an exploitation framework with various tools used in social engineering, obtaining installs, keeping persistence, and interacting with your targets.
Recon-ng is an OSINT framework for discovering information on your target pre-exploitation or for other purposes such as location, host correlations, etc.
SQLMap , WPScan , and Maltego are other tools you should also learn about.
SQLMap helps you identify and perform SQL injections on vulnerable hosts to interact with databases to manipulate them to do your bidding such as dumping themselves or adding new users.
WPScan is similar but works on WP Sites. It attempts to find vulnerabilities, exploit them, and interact with databases or the host itself.
Maltego is for mapping out your data so you can better visualize all the points or information you have identified on your targets.
I hope this helps.