Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options answers only user 140

The process of collecting information about an intended target of a malicious hack by probing the target system.

1
vote
recon-ng already supports import of external data (by newlines) with the SOURCE variable. SOURCE should be available via most plugins, including the domain ones you are interested in. Check the wiki …
answered Nov 27 '16 by atdre
3
votes
Jason Haddix wrote my favorite subdomain/hostname discovery tool that depends on a very-recent version of recon-ng -- available here -- https://github.com/jhaddix/domain subbrute is decent, fierce -d …
answered Apr 9 '15 by atdre