The BackTrack 4 tools grouped in this category can be used to get domain and e-mail address information.
goorecon is a subdomain and e-mail enumeration tool written in Ruby language. It will find out the subdomains or e-mails that are available in the domain you specified using Google as the search engine.
goorecon from the BackTrack 4 menu, navigate to Backtrack | Information Gathering | Searchengine | Goorecon, or you can use the console and type the following command:
# cd /pentest/enumeration/goorecon # ./goorecon.rb
This will display usage information on your screen.
To find out the subdomains available in the target domain, we give the following command:
# ./goorecon.rb -s targetdomain
The subdomains ...