Penetration Tester's Open Source Toolkit, 2nd Edition

Chapter 1. Reconnaissance

Solutions in this chapter:

• Objectives

• Approach

• Core Technologies

• Open Source Tools

• Case Study: The Tools in Action

Objectives

So, you want to hack something? First, you have to find it! Reconnaissance is quite possibly the least understood, or even the most misunderstood, component of Internet penetration testing. Indeed, so little is said on the subject that there isn’t even a standard term for the exercise. Many texts refer to the concept as enumeration, but that is somewhat vague and too generally applied to do justice to the concept covered here. The following definition is from Encarta:

*re·con·nais·sance n

1. The exploration or examination of an area, especially to gather information about the strength and positioning of enemy ...