Card Recon 3.0.2
Logging Into Card Recon
You need to log into Card Recon before you can use the application. You can log into Card Recon through:
If the host connects to the Internet through a proxy server, it must use a transparent proxy for Card Recon to authenticate online.
Online Authentication
Online Authentication requires a working Internet connection. This means that the host running Card Recon must have TCP port 80 open for outbound connections.
If the host connects to the Internet through a proxy server, it must use a transparent proxy for Card Recon to authenticate online.
Card Recon will attempt to connect to Ground Labs authentication servers; if it cannot connect to the authentication servers, Card Recon will return a "Can’t connect to licensing system" error and will not allow you to continue using Card Recon.
You can authenticate online using:
- Your Ground Labs Services Portal login details.
- Generated Scan Tokens. See Generating and Using Scan Tokens.
Ground Labs Services Login
You can log into Card Recon using your Ground Labs Services Portal username and password.
Card Recon will connect to the Ground Labs authentication servers and verify your login details.
If you log in using your Ground Labs Services Portal account, Card Recon will use license information that is associated with that account. This means that information regarding available licenses and assigned Targets will be pulled from your Ground Labs Services Portal account.
If the Target is not already assigned a license under your account, Card Recon will prompt you to apply or purchase an appropriate license when trying to scan it.
Scan Token Login
Select "Login with token" to log into Card Recon with a Scan Token.
Using a Scan Token to log into Card Recon would mean that Card Recon would use licensing information associated with the Scan Token.
License assignment will be limited to the licenses associated with the Scan Token, and the number of activations allocated to it.
Logging in with a Scan Token will still draw information about licenses from the Scan Token’s Ground Labs Services Portal parent account that have already been assigned to Targets.
If the Target has a license already assigned to it, using a Scan Token will not use an additional license if the existing license and the Scan Token are from the same Ground Labs Services Portal parent account.
For more information on Scan Tokens, see Generating and Using Scan Tokens.
Offline Authentication
Authenticating offline is possible with Card Recon. If the Target is on a host without Internet access, or if your host has connectivity issues that prevent you from authenticating online, you can authenticate offline to perform a scan.
The Ground Labs Services Portal allows authorized users to download Offline License Files (*.li2).
You must assign at least one license to a Target before you can download an Offline License File.
Once you have assigned a license to a Target, you’ll be able to download an Offline License File. If no Target has been assigned, the Ground Labs Services Portal will return an error.
Look for the "Licenses Available" section on the Ground Labs Services Portal dashboard. Click download to download the Offline License File.
There are 2 ways to use Offline License Files in the Card Recon CLI and GUI:
- Selecting the Login with offline license file option at the Card Recon login screen.
- Placing the Offline License File in the same folder as the Card Recon executable.
Selecting Login with Offline License File
Selecting Login with offline license file prompts you to locate an Offline License File on your disk.
Using an Offline License File on the Windows GUI
On the Windows GUI, the Login with offline license file option can be found on the login screen.
Selecting that will get Card Recon to prompt you to locate your Offline License File on your disk.
Using an Offline License File on the CLI
On the Card Recon CLI, selecting the Use offline license file option will prompt you to locate your Offline License File on the disk.
If the license file you are using is outdated, or if it does not contain the appropriate license for the Target that you wish to scan, Card Recon will prompt you to authenticate online.
Placing the Offline License File in the Same Folder as the Card Recon Executable
The Card Recon CLI and GUI will check if there are any Offline License Files in the same directory as its executable.
If it finds an .li2 file, it will check if the license contained in it matches the intended Target.
If it does not, Card Recon will prompt you to authenticate online.