Passive Reccoinassance

Passive recce is done by relying on publicly available knowledge without directly engaging with the target, eg.

• Looking up DNS records of a domain
• Checking job ads on the target website
• Reading news about the target company

Tools ​

• whois
• nslookup
• dig
• dns-dumpster
• shodan