Playing around with recon-ng

recon-ng is an Open Source set of tools created by the estimable LaNMaSteR53 (aka Tim Tomes). Proper credit goes out to Black Hills Information Society for their sponsorship and support of the toolkit.

recon-ng is incredibly easy to use and I found it very intuitive. The modules and core are written in Python and easy to modify to meet your needs. The interface functions well and provides good help information. There are also numerous handy options for scripting, reading commands from a file, etc. All of the data collection goes into a SQLITE database on the backend. Simple queries are handled within the interface and more complex ones can be passed from command line arguments or read in from files. There is also record and playback functionality within the standard interface for actions.

Two types of modules comprise the toolkit. The collection modules are used to collect data from multiple sources and source types (Twitter, domain information, netblocks, Instagram, etc). Once the data is collected, reporting modules are used to represent the collections. Reporting options include JSON output, CSV, Pushpin (my favorite so far) and HTML.

The modules are very well connected and allow data elements to be utilized and reported on across modules. A domain name or netblock can easily be used as a starting point to collect a wealth of intel including vulnerabilities, contacts, leaks, and owned resources.

I’m currently using recon-ng for multiple purposes. As an exercise for me to understanding the capabilities, I utilized the s/twitter module for data collection and the reporting/pushpin module for reporting to build a view of 24 hours worth of Twitter posts in the Wichita, KS area. I was easily able to create some quick and dirty crontabs to update the data collection reporting elements every 5 minutes and prune the database entries in the pushpins table to keep a rolling 24 hours worth of data.

I’m also utilizing recon-ng as an integral piece for threat modeling. I’m able to collect threat intel data acting as an outside threat actor and report that data to a wide variety of audiences. These audiences include C-level executives, technical and security teams, and business process owners.

Overall, an excellent set of tools to utilize in a wide variety of information security endeavors.

Buddy Holly, Ben Hur, Space Monkey, Mafia

I have the perception that this is where all goes awry in the song. There are more four event phrases (Hula Hoops, Castro, Edsel is a no-go) and the strict chronology goes out the window. So, it’s off the rails we go…

Every time I think of Buddy Holly:

Buddy_Holly

I think of Elvis Costello (nee Declan MacManus):

elvis-costello

One of them had an 18 month career; died in a plane crash and the other married:

DianaKrall_Cologne_2695

Ben Hur is another one of the epic movies that I’ve never seen and probably won’t have time to review. Meh.

From epic chariot races (yes I have anecdotal knowledge) to MONKEYS! No, CHIMPS!

Space Monkey is a most likely a reference to “Ham the Space Chimp/Monkey”:

article-0-0005FC0800000258-770_634x501

AMERICA is obviously more humane than the RED THREAT (poor doggie Laika). We put a close relative to humans in space AND we brought him back!

ham-astrochimp

For Bokononism’s sake! Our FUTURE PERFECT LEADER OF THE FREE WORLD loved chimps/monkeys!:

435Bonzo22

*warning!!! this entry based almost entirely on sarcasm.

Oh! and GOODFELLAS/CASINO/GODFATHER/EVERYTHING SCORSESE!!! That should cover me for the mafia right?

Starkweather homicide, Children of Thalidomide

And we’ve hit the awkward part of this verse. Awkward to the point of no pictures and me struggling to apply humor.

I didn’t know who Charles Starkweather was until I looked him up on the internet about 10 years ago or so. I had seen “Natural Born Killers” in its theatrical release back in 1994. But, I didn’t make the Starkweather connection until years later. I can’t particularly remember what triggered me searching the name. And I haven’t seen any of the other movies based on Starkweather/Fugate. Not even True Romance on TNT or anything. This article seems to be a fairly decent overview of the saga.

Thalidomide is the product of the German drug company Chemie Grünenthal (now known exclusively as Grünenthal). It was originally introduced as a cure for morning sickness. Thalidomide has horrible affects on the normal human gestation process. The most well known is severely truncated limbs. I can remember seeing pictures of children affected by thalidomide in my grade-school textbooks. Only half of the 10,000 children known world-wide to be affected by thalidomide survived their childhood years.

Lebanon, Charles de Gaulle, California baseball

I remember it because it has a cedar tree on it. And the second thing I contemplate about Lebanon is this promontory proboscis:

jamiefarr in his mudhens shirt

When I was a kid, the Toledo Mudhens were the Triple A affiliate for the Minnesota Twins.

Charles de Gaulle is an airport and a brain in a jar. And I’m passing him quickly to get back to baseball.

The era of California Baseball starts in 1958 on the major league level. The Giants move from New York to San Francisco and the Dodgers abandon Brooklyn for the less bum-infested Chavez Ravine. Although Chavez Ravine is in Sulfur Canyon and therefore probably smells a lot like bums. Two points to make here:

    1. I am obsessed with Ebbets Field
    2. Vincent Edward Scully is still calling Dodger games.

Seriously folks, hear him call a game while you still can. He IS a tie that binds back to multiple eras of baseball. I’m out of superlatives so I’m switching to analogies. Imagine being able to listen live to a performance by Liszt, or Chopin. Or having to move your beer to avoid a Carrie Nation hatchet blow. Do it.

Sputnik, Chou En-Lai (Zhou Enlai), Bridge on the River Kwai

Ah, back on the horse. Honestly, I suspected the lag to be longer and the finish to be more distant when I picked back up. So count this as a Pinter Pause and move forward.

Sputnik translates into English as “traveling companion” which reminds me of the following (with reverse translation by me) Paul Simon lyric from “Graceland”:

My Sputnik is nine years old. He is the child of my first marriage.

Maybe that doesn’t really work.

I remember my father telling me the story of his father waking the family up so that they could listen to the beep of Sputnik on the radio. Maybe they even watched it’s orbital track? Not sure on that.

Chou En-Lai (Zhou Enlai) attended a religious school in Japan, swung through France to pick up Communism, and ended up as Mao’s slightly less bumbling Dan Qualye. He’s also responsible for Nixon going to China. So thanks for taking him off our hands for a week or so. Writing this is making me feel exceptionally ignorant about everything outside of my small world. I did actually finish reading a whole entire book written primarily for adults recently:

9463268

It was fiction, about Japan, and interesting. I bought it in an airport.

The Bridge on the River Kwai is a novel written in 1952 by Pierre Boulle. The movie is better known than the book. The Music Section in the Wikipedia article provided me much amusement upon reading. Mostly because it lead me to the song “Hitler Has Only Got One Ball” (Spotify link).