🕵️ Reconnaissance Techniques

Passive Reconnaissance Techniques

Gather intelligence without direct interaction with target systems:

• OSINT (Open-Source Intelligence)
• Social Media Profiling
• Domain Research
• Public Record Analysis

Active Reconnaissance Methods

Direct interaction and scanning of target infrastructure:

• Network Mapping
• Port Scanning
• Service Fingerprinting
• DNS Enumeration

Recommended Reconnaissance Tools

• Maltego
• Recon-ng
• Shodan
• theHarvester
• Nmap