Module 3

Reconnaissance and Advanced Information Gathering

Certified
Certified
Objective

Leverage open-source intelligence (OSINT) and advanced reconnaissance tools to identify vulnerable targets and security flaws.

Activity

Activity

Subdomain enumeration using Amass and Subfinder against a target domain. Directory brute-forcing with Gobuster to uncover hidden resources. Perform a full Nmap scan on a public target to enumerate services and versions.

Content

Content

DNS Interrogation: Subdomain enumeration using tools like Sublist3r, Amass, and Subfinder Directory/Path Brute Forcing: Using Burp Suite Intruder and Gobuster for directory enumeration and discovering hidden endpoints Port Scanning and Fingerprinting: Using Nmap, Masscan, and Nikto to perform active reconnaissance and service enumeration Google Dorking: Advanced search techniques to uncover sensitive files and endpoints OSINT Gathering: Extracting useful information from social media, public APIs, and domain records

Build for all sites & platform

Lorem ipsum dolor sit amet, consectetuer aenean. commodo ligula eget dolor aenean massa sociis natoque adipiscing penatibus.

0 +

Trusted Company