macOS
brew install recon-nglocal Homebrew formula metadata
brew / rank 3828
Web Reconnaissance Framework. Version 5.1.2 via Homebrew; verified 2026-09-16. Also installable with debian: sudo apt install recon-ng.
install
brew install recon-nglocal Homebrew formula metadata
sudo apk add recon-ngAlpine Linux edge package indexes · recon-ng · source: dl-cdn.alpinelinux.org
sudo apt install recon-ngDebian stable package indexes · recon-ng · source: deb.debian.org
nix profile install nixpkgs#recon-ngnixpkgs package indexes · pkgs/by-name/re/recon-ng/package.nix · source: api.github.com
overview
Web Reconnaissance Framework
history
Recon-ng is a Python-based open-source intelligence framework for structured web reconnaissance. It combines persistent workspaces and databases with an installable module marketplace and interactive, command-line, and web interfaces.
Recon-ng was created as a full-featured, modular framework for web-based open-source reconnaissance. Version 5 moved to a new source repository and substantially changed the framework, requiring users of source installations to migrate their Git remote or replace their checkout.
The fifth-generation design moved modules into a marketplace rather than bundling them with the core. It also provides three principal interfaces: the interactive recon-ng shell, recon-cli for automation, and recon-web for analysis and visualization.
Recon-ng is distributed through multiple Unix-oriented package ecosystems, including Homebrew, Alpine Linux, Debian, and Nix, according to the supplied package-manager metadata. Its official installation guide also discusses distribution-managed installations such as Kali Linux alongside source and Docker deployments.
Operators seed workspace databases with domains, contacts, or other records, install relevant marketplace modules, and chain module output into subsequent reconnaissance steps. Resource files and recon-cli support automation, while recon-web supports analysis, visualization, and export.
Third-party service credentials are stored independently in ~/.recon-ng/keys.db. Workspace data and persisted module options live under ~/.recon-ng/workspaces/.
Recon-ng is notable to package enthusiasts as a modular, Metasploit-like OSINT environment packaged across several Unix ecosystems. Its separation of the core framework, module marketplace, persistent workspaces, and credential database makes packaging more involved than wrapping a single-purpose command.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.recon-ng/workspaces/<workspace>/config.datCredential-bearing paths to review before unattended agent runs.
~/.recon-ng/keys.dbexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
recon-cli | cli | global executable | |
recon-ng | cli | global executable | |
recon-web | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/lanmaster53/recon-ng
install metadata
| Package key | brew:recon-ng |
|---|---|
| Version | 5.1.2 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/recon-ng |
| Homepage | https://github.com/lanmaster53/recon-ng |
| Repository | https://github.com/lanmaster53/recon-ng |
| License | GPL-3.0-only |
| Source archive | https://github.com/lanmaster53/recon-ng/archive/refs/tags/v5.1.2.tar.gz |
| Last updated | 2026-09-16T04:02:31Z |
| Pulse | updated |
| Dependencies | certifi, libyaml, python@3.14, rpds-py |
| Uses from macOS | libxml2, libxslt |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | recon-ng |
| Version Scheme | 0 |
| Revision | 3 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
recon-ng 5.1.2-1.2
Web Reconnaissance framework written in Python
https://github.com/lanmaster53/recon-ng
sudo apt install recon-ngrecon-ng
nix profile install nixpkgs#recon-ngrecon-ng 5.1.2-r1
Full-featured Web Reconnaissance framework written in Python
https://github.com/lanmaster53/recon-ng
sudo apk add recon-ngsource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.