Reconnaissance (often abbreviated as "recon") is the initial phase where information about the target system or network is gathered passively and sometimes actively. This phase is crucial as it sets the groundwork for the rest of the penetration testing process. The main objectives of reconnaissance are to identify potential attack vectors, understand the target's infrastructure, and gather intelligence to plan subsequent testing phases effectively.
Passive Recon
Passive reconnaissance in penetration testing involves discreetly collecting data about a target system or network without making direct contact. This method relies on analyzing publicly available information, such as social media profiles, DNS records, and public databases, to gather insights without alerting the target.
Active Recon
Active reconnaissance in penetration testing involves directly engaging with the target system or network to gather information. This approach includes techniques like port scanning, ping sweeps, and other probing activities
