Putting what you have learned into practice

As you work with reconnaissance, please keep in mind that the reconnaissance phase is the most important in an ethical hack. During this phase, you can discover a wealth of information that can help you along the way.

The following list of activities aims to give you a feel for using various tools. Please remember to stay ethical and don’t conduct reconnaissance activities on any organization that would be deemed illegal.

DNS domain enumeration

The steps are as follows:

1. Try to perform a zone transfer using dnsrecon on the zonetransfer.me domain.
2. Try to perform a brute-force attack using a file with sub-domains and the dnsenum tool on the zonetransfer.me domain.
3. If you own a domain, try to use the available DNS tools to enumerate details about your domain.

Performing OSINT with Shodan

The steps are as follows:

1. Work with Shodan.io to discover databases that exist on the internet that have been...