Exploring reconnaissance
Reconnaissance, also commonly known as recon, involves using tools that allow you to gather information about a target that can be used to gain an advantage on your target. Recon allows you to act like a James Bond-like figure and allows you to gather intelligence on a target. As mentioned in Chapter 2, Pentesting and Ethical Hacking, in a white-box test, the tester will know everything there is to know about the target. It is always best to use tools that search for information that the client may have forgotten to tell you, or that let us look at open source information the client may deem not "impactful." Various organizations will determine what is impactful and what is not – it isn't a "one size fits all" type of deal. Let's discuss a simple methodology for recon that can be applied to most organizations.
Driving enumeration for recon
When performing successful recon, you must ensure that you discover as much...
