[Music]
hey guys welcome back to
the recon ng version 5 series uh in this
video we're going to be talking about
apis in recon ng and
yeah so let's get started uh without any
further ado so first of all i just want
to let you know that i've saved my
showdown api key here
and for those of you will be warning me
in the comments section that it's a
dangerous thing to expose
i will have already reset my api key
after i finish recording this video uh
then we also have built with
right so i have my built with domain api
right over here
so we'll be going through the very
showdown and
built with modules and how to add the
various api keys here
okay so let's get started so first of
all if i type in help
you can see we have the uh where is it
we have the keys
option here so this uh essentially
allows you to manage third-party
resource credentials
right so a good example of this would be
showdown
you know you require an api uh that will
then allow you to uh to actually
access their their search engine to you
know perform queries of whatever sort
uh you know ones that are dictated by
them by the module that you in
you will install here so uh what we're
gonna do
is uh we are gonna if we say keys right
and
you can then take a look at the options
we can list the keys that we have we can
remove an ad
etc etc but an easy way of doing this is
by taking a look at the module we're
going to be dealing with so let's talk
to
let's get started with showdown first of
all right so
we're essentially going to say
marketplace uh search
and we're going to look for showdown
modules uh that uh you know related to
showdown so
an interesting one here is the domains
uh hosts uh module which is again
the showdown host name here we also have
the showdown ip
and you can you can note something very
important that they all require
the api key integration and that is
noted by the asterisk here
for each of them uh they're currently
updated uh
you can see in 2019 which is great um so
we can also take we also have the push
pins
um netblocks uh uh we showed a net
uh so we'll first of all try the the
showdown host name here so we'll copy
this
and uh what we'll do is again we'll just
simply install it marketplace install
and we'll paste in the relative path
here
you can see that it will tell us we have
an error that is denoted by an
exclamation mark within the brackets so
showed an api
a key was not set showed in hostname
module will
likely fail at runtime so in order to
add it we say
keys add and then we can use the tab
autocompletion
and that will say showdown api do you
want to specify the api key for showdown
api
and we say yes and then we want to get
the the actual api here i'm going to
copy
my showdown api and we specify it right
over here and
we hit enter all right so now it's added
the showdown api key
excellent so now we can say modules uh
modules load
and we're looking for the showdown so
that is right over here so there's also
recon
domains and hosts and we're looking for
showdown
host name load this if we take a look at
the information here we can see we have
this will harvest hosts
from the showdown api by using the host
name
search operator and this will update the
hosts table
important information there we can limit
the amount of api requests per input
source
so zero is unlimited and one is i've
just currently set the value to 1
because
i because i want to demonstrate
something you can see i also set my
source here so what we'll do is we'll
say options
on unset and we'll say unset the source
here
and we'll clear that out and uh let's
just
display the info one more time and let's
uh let's actually get started so we're
gonna say options
set uh yeah we wanna set this and we
wanna set the source here
and the source is gonna be uh bbc info
uh sorry bbc.com not bbc info
when hit enter that's going to set the
source
um so we can now hit run and you can see
it's going to search the showdown api
for the hostname
bbc.com so we're just gonna let this run
and immediately you can see we have a
lot more
results than any of the other search
engine engines we were using
so this shows you the power of showdown
first of all and secondly the power of
recon ng
thirdly the power of the of the showdown
hostname module
so uh you can see um we have the ip
address
uh the uh the port which gives us some
ideas to the protocol we're dealing with
here
so we have mail.bbc
uh we have various various domains and
host names here
um so we can go through this one will be
generating reports we have 55 total
seven new hosts found uh and you can see
that
um we get the various uh the various
domains here
but that's besides the point so that's
essentially how to use the show that api
key how to add it and then how to use it
in conjunction
with a module right now i'm not going to
be talking about the showdown modules
let's take a look at build with because
i also had a few options with built with
so
we'll say marketplace search
and we're looking for built with because
it's it's a
great module that allows you to uh to
build a profile of the various web
technologies that are used on a website
so for example it'll allow you to tell
if a website is using a cms
like wordpress or like joomla etc you
get the idea
you can also see that this requires an
api key integration here so we're just
going to copy the relative path again
same syntax marketplace install uh
and we want to paste in the relative
path that is going to install it it's
going to give us the same error telling
us that the built with api key was not
set
uh so the built with module will likely
fail etc so you can say keys
add and we can use the tab auto
completion and we say we want to specify
the build with api here
so i'll just go into my browser and
we'll copy this api let me just refresh
this
so that i think i'd reset it before so
let's just copy it one more time
and by the way i'll put a link in the
description to where you can sign up for
build with it's absolutely free and you
have some free credits that you can use
so we have added the built with api so
if we say keys
sorry where you say keys we can say list
the keys that we have so you can see we
have the built with api keys we have the
showdown api key added here
so again we can look we say modules
load and we're looking for the built
with module here
so that is also another recon module let
me just paste in the relative path here
and the module we're using so we can see
it is set now uh so you can see this
leverages the built with api to identify
hosts technologies and contacts
associated with a domain interesting
stuff
so again this uh the first option we
have here is unique so that is the show
or option that allows us to display the
technologies and we want to set the
value to true
so this will show us all the the
technologies that are currently using
secondly is the source so let me just
unset this
um i'm going to say source
that is the source there and we can now
set the option one more time
and so we're going to say options uh set
and i'm gonna say source this is the
source here and bbc.com hit
enter and uh we can now hit run
and i had a few issues with this module
so you can see it really doesn't display
any options
now i don't know whether this is a
problem on my end but again
if we take a look at the uh overview
here uh we can see that the built with
api
uh you can see if i take a look at my
usage here i have
pretty much zero requests uh since the
beginning of me
since the beginning of me uh actually
opening this account so
uh you can see that uh we have the domi
the domain api and we also have the free
api so this is the one i've been using
so the free api
is really limited to one request per
second if you're not purchased api
uh credits so again we if we take a look
at the
um i think i'll take a look at the tools
uh the domain uh what are my current
credits
if i say buy credits here uh let's see
how many current it doesn't tell me how
many credits i currently have
uh so let me just go back into my usage
here uh
so nothing here so maybe it's just a
problem with my account where i don't
have enough
uh i don't have enough credits but let
me know how it goes with you guys it's a
great uh
it's a great module and that's why i've
covered it in this video again you can
get the browser extension as well
that works just great but again this
this can be this can be used to automate
the process
of gathering that information and all be
useful in building a report
all right so that's pretty much all i
wanted to cover in this video now there
are plenty of other modules that require
an api
uh you know one of them is bing so you
can search for those modules and you can
go through them so again
we just go back and we can say
marketplace
search if we hit enter you can see the
various ones here that require
an api like twitter for example really
great stuff uh so we can get push pins
uh for both twitter youtube so they all
require an api integration so we have
bing
let's see which other one we have we
have virus total so you can go through
all of them
uh hopefully i've covered how to uh you
know how to use keys and
how to integrate them with recon ng uh
by the way if you want to delete a key
so
we say keys and we'll say remove and we
specify the name here so we can remove
the build with api key
and they'll get that will get rid of it
all right
if you want to get rid of a particular
module let me just end with that so we
can say marketplace
um or we can actually use modules but
let me just show you so if we type
modules right so you can see we can only
load reload and search for one
if we hit marketplace we can pretty much
install and
uninstall them from the marketplace so
we say marketplace
remove remove and we can use the tab
auto completion this gives us an idea
of all the modules we have installed we
want to get rid of the built with module
again just copy the entire name and
relative path hit
enter that's going to remove the module
and
you know so on and so forth so that's
pretty much going to be it for this
video
in the next video we'll be talking about
interacting with the database and
generating reports
[Music]
you