pkg.soopen package index

brew / rank 3828

Install recon-ng with Homebrew, apk, apt, Nix

Web Reconnaissance Framework. Version 5.1.2 via Homebrew; verified 2026-09-16. Also installable with debian: sudo apt install recon-ng.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install recon-ng

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add recon-ng

Alpine Linux edge package indexes · recon-ng · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install recon-ng

Debian stable package indexes · recon-ng · source: deb.debian.org

Nixverified · 92%
nix profile install nixpkgs#recon-ng

nixpkgs package indexes · pkgs/by-name/re/recon-ng/package.nix · source: api.github.com

overview

Package summary

Web Reconnaissance Framework

Commands and aliases

  • recon-cli
  • recon-ng
  • recon-web

history

Project history and usage

Recon-ng is a Python-based open-source intelligence framework for structured web reconnaissance. It combines persistent workspaces and databases with an installable module marketplace and interactive, command-line, and web interfaces.

Project history

Recon-ng was created as a full-featured, modular framework for web-based open-source reconnaissance. Version 5 moved to a new source repository and substantially changed the framework, requiring users of source installations to migrate their Git remote or replace their checkout.

The fifth-generation design moved modules into a marketplace rather than bundling them with the core. It also provides three principal interfaces: the interactive recon-ng shell, recon-cli for automation, and recon-web for analysis and visualization.

Adoption history

Recon-ng is distributed through multiple Unix-oriented package ecosystems, including Homebrew, Alpine Linux, Debian, and Nix, according to the supplied package-manager metadata. Its official installation guide also discusses distribution-managed installations such as Kali Linux alongside source and Docker deployments.

How it is used

Operators seed workspace databases with domains, contacts, or other records, install relevant marketplace modules, and chain module output into subsequent reconnaissance steps. Resource files and recon-cli support automation, while recon-web supports analysis, visualization, and export.

Third-party service credentials are stored independently in ~/.recon-ng/keys.db. Workspace data and persisted module options live under ~/.recon-ng/workspaces/.

Why package nerds care

Recon-ng is notable to package enthusiasts as a modular, Metasploit-like OSINT environment packaged across several Unix ecosystems. Its separation of the core framework, module marketplace, persistent workspaces, and credential database makes packaging more involved than wrapping a single-purpose command.

Timeline

  • Version 4 era: Modules were bundled in the traditional framework layout.
  • Version 5: The project moved to a new repository and adopted a substantially revised architecture.
  • 2019: The official Features guide documented the marketplace-based architecture, persistent workspaces, recon-cli, and recon-web.
  • 2020: The official Getting Started guide documented version 4-to-5 migration and the independent keys database.

Related projects

  • The project explicitly compares its interface with the Metasploit Framework while emphasizing that Recon-ng is designed for reconnaissance rather than exploitation.
  • Its module marketplace is maintained separately from the framework core and supplies installable reconnaissance, discovery, exploitation, and reporting modules.

Sources

  • Official Features guide: https://github.com/lanmaster53/recon-ng/wiki/Features
  • Official Getting Started guide: https://github.com/lanmaster53/recon-ng/wiki/Getting-Started
  • Official repository: https://github.com/lanmaster53/recon-ng
  • Package availability: source_facts.package-manager

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 4 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.recon-ng/workspaces/<workspace>/config.dat

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.recon-ng/keys.db

executables

Installed executables

CommandKindExposureNote
recon-clicliglobal executable
recon-ngcliglobal executable
recon-webcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-09-19
manager version5.1.2
manager updated2026-09-16
local dataok
upstreamcurrent
latest detectedv5.1.2

https://github.com/lanmaster53/recon-ng

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:recon-ng
Version5.1.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/recon-ng
Homepagehttps://github.com/lanmaster53/recon-ng
Repositoryhttps://github.com/lanmaster53/recon-ng
LicenseGPL-3.0-only
Source archivehttps://github.com/lanmaster53/recon-ng/archive/refs/tags/v5.1.2.tar.gz
Last updated2026-09-16T04:02:31Z
Pulseupdated
Dependenciescertifi, libyaml, python@3.14, rpds-py
Uses from macOSlibxml2, libxslt
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namerecon-ng
Version Scheme0
Revision3
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

recon-ng 5.1.2-1.2

Web Reconnaissance framework written in Python

https://github.com/lanmaster53/recon-ng

sudo apt install recon-ng
  • Section: utils
  • Architecture: all
  • 17 dependencies
  • normalized package name match
  • Matched by: Recon Ng
Debian stable package indexes · deb.debian.org · Debian stable package indexes: recon-ng from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

recon-ng

nix profile install nixpkgs#recon-ng
  • normalized package name match
  • Matched by: Recon Ng
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/re/recon-ng/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

recon-ng 5.1.2-r1

Full-featured Web Reconnaissance framework written in Python

https://github.com/lanmaster53/recon-ng

sudo apk add recon-ng
  • License: GPL-3.0-only
  • Architecture: x86_64
  • Source Package: recon-ng
  • 1 dependencies
  • normalized package name match
  • Matched by: Recon Ng
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: recon-ng from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation