Reconnaissance Overview
Reconnaissance Overview
Navigation
Sections in This Note
Two Types of Information Gathering
- Passive Information Gathering
- Active Information Gathering
Passive Information Gathering
Involves gathering as much information as possible without actively engaging with the target.
- Identifying IP address and DNS info, domain name, domain ownership, email, social media profiles, subdomains used, web technology used, etc.
Active Information Gathering
Involves gathering as much information as possible by actively engaging with the target system.
- Discovering open ports on the target, internal infrastructure of the target, and enumerating information from the target system.
Passive Information Gathering
WIP
Visual Diagram
flowchart TD A[Scope]-->B[Passive Recon] A-->C[Active Recon] B-->D[Targets] C-->D D-->E[Enumeration Plan]