Network Reconnaissance

Gather intelligence on a target through passive and active reconnaissance, then probe the network services that keep modern infrastructure running.

Reconnaissance is where every engagement begins, and this module covers both halves. You’ll start with passive techniques that mine public records, search engines, and DNS data without ever touching the target, then move into active probing with classic network utilities to map live systems. From there, you’ll work through the everyday protocols and services that keep networks running, learning how each one behaves and how attackers turn its quirks against it.