Reconnaissance and Asset Discovery
Understanding the Target
What Reconnaissance Means
Reconnaissance is the process of gathering information about a system before testing it. In ethical hacking, recon should stay within authorization and avoid unnecessary disruption.
Types of Recon
Passive recon uses publicly available information without directly interacting with the target. Active recon involves direct interaction and must be explicitly allowed.
Passive vs Active Reconnaissance
Passive Recon
- Uses public sources
- Lower risk
- Good for first learning
Active Recon
- Directly interacts with systems
- Can be more noticeable
- Requires clear permission
Important Distinction
Beginner ethical hackers should focus on understanding the difference between passive and active methods before using any tools.
Which type of reconnaissance uses publicly available information?
Passive recon uses sources that are already public and does not directly probe the target.
Correct answer: Passive recon
Why must reconnaissance stay within scope?
Even information gathering must follow the rules of engagement.
Correct answer: Because unauthorized information gathering can be illegal or harmful.
What is the main risk of active reconnaissance?
Active recon directly interacts with a system, so it can be detected and may affect operations.
Correct answer: It may be noticed and can cause impact
Reconnaissance Process
-
1
Step 1: Review the rules of engagement.
-
2
Step 2: Define what information is needed.
-
3
Step 3: Collect only approved information.
-
4
Step 4: Organize findings into useful notes.
-
5
Step 5: Share results responsibly.