.\" Generated by kramdown-man 1.0.1
.\" https://github.com/postmodern/kramdown-man#readme
.TH ronin-recon-test 1 "2023-05-01" Ronin "User Manuals"
.SH NAME
.PP
ronin\-recon\-run \- Runs the recon engine with one or more initial values
.SH SYNOPSIS
.PP
\fBronin\-recon run\fR \[lB]\fIoptions\fP\[rB] \[lC]\fIIP\fP \[or] \fIIP\-range\fP \[or] \fIDOMAIN\fP \[or] \fIHOST\fP \[or] \fIWILDCARD\fP \[or] \fIWEBSITE\fP\[rC] \.\.\.
.SH DESCRIPTION
.PP
Runs the recon engine with one or more initial values\.
.SH ARGUMENTS
.TP
\fIIP\fP
An IP address to recon (ex: \fB192\.168\.1\.1\fR)\.
.TP
\fIIP\-range\fP
A CIDR IP range to recon (ex: \fB192\.168\.1\.0\[sl]24\fR)\.
.TP
\fIDOMAIN\fP
A top\-level domain name to recon (ex: \fBexample\.com\fR)\.
.TP
\fIHOST\fP
A sub\-domain to recon (ex: \fBwww\.example\.com\fR)\.
.TP
\fIWILDCARD\fP
A wildcard host name (ex: \fB*\.example\.com\fR)\.
.TP
\fIWEBSITE\fP
A website base URL to recon (ex: \fBhttps:\[sl]\[sl]example\.com\fR)\.
.SH OPTIONS
.TP
\fB\-D\fR, \fB\-\-debug\fR
Enables debugging output\.
.TP
\fB\-C\fR, \fB\-\-config\-file\fR \fIFILE\fP
Loads the \fBronin\-recon\fR configuration file\. If not specified, then
\fB\[ti]\[sl]\.config\[sl]ronin\-recon\[sl]config\.yml\fR will be loaded instead\.
.TP
\fB\-w\fR, \fB\-\-worker\fR \fIWORKER\fP
Explicitly uses the specified worker instead of the default set of workers\.
.TP
\fB\-e\fR, \fB\-\-enable\fR \fIWORKER\fP
Enables the worker in addition to the default set of workers\.
.TP
\fB\-d\fR, \fB\-\-disable\fR \fIWORKER\fP
Disables the worker from the default set of workers\.
.TP
\fB\-\-worker\-file\fR \fIFILE\fP
Loads a custom worker from the specified \fB\.rb\fR file\.
.TP
\fB\-p\fR, \fB\-\-param\fR \fIWORKER\fP\fB\.\fR\fINAME\fP\fB\[eq]\fR\fIVALUE\fP
Sets a param value for the given worker\.
.TP
\fB\-c\fR, \fB\-\-concurrency\fR \fIWORKER\fP\fB\[eq]\fR\fINUM\fP
Overrides the concurrency for the given worker\.
.TP
\fB\-\-max\-depth\fR \fINUM\fP
The maximum recon depth\. Defaults to depth of \fB3\fR if the option is not
specified\.
.TP
\fB\-o\fR, \fB\-\-output\fR \fIFILE\fP
The output file to write results to\.
.TP
\fB\-F\fR, \fB\-\-output\-format\fR \fBtxt\fR\[or]\fBlist\fR\[or]\fBcsv\fR\[or]\fBjson\fR\[or]\fBndjson\fR\[or]\fBdot\fR\[or]\fBsvg\fR\[or]\fBpng\fR\[or]\fBpdf\fR
The output format\. If not specified, the output format will be inferred from
the \fB\-\-output\fR \fIFILE\fP extension\.
.TP
\fB\-\-import\fR
Imports each newly discovered value into the Ronin database\.
.TP
\fB\-I\fR, \fB\-\-ignore\fR \fIVALUE\fP
The value to ignore from the result\.
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help information
.SH EXAMPLES
.PP
Run the recon engine on a single domain:
.PP
.RS 4
.EX
\[Do] ronin\-recon run example\.com
.EE
.RE
.PP
Run the recon engine on a single host\-name:
.PP
.RS 4
.EX
\[Do] ronin\-recon run www\.example\.com
.EE
.RE
.PP
Run the recon engine on a single IP address:
.PP
.RS 4
.EX
\[Do] ronin\-recon run 1\.1\.1\.1
.EE
.RE
.PP
Run the recon engine on an IP range:
.PP
.RS 4
.EX
\[Do] ronin\-recon run 1\.1\.1\.1\[sl]24
.EE
.RE
.PP
Run the recon engine on multiple targets:
.PP
.RS 4
.EX
\[Do] ronin\-recon run example1\.com example2\.com secret\.foo\.example1\.com \e
                  secret\.bar\.example2\.com 1\.1\.1\.1\[sl]24
.EE
.RE
.PP
Run the recon engine and ignore specific hosts, IPs, URLs, etc\.:
.PP
.RS 4
.EX
\[Do] ronin\-recon run \-\-ignore staging\.example\.com example\.com
.EE
.RE
.SH AUTHOR
.PP
Postmodern 
.MT postmodern\.mod3\[at]gmail\.com
.ME
.SH SEE ALSO
.PP
.BR ronin\-recon\-workers (1)
.BR ronin\-recon\-worker (1)
.BR ronin\-recon\-test (1)