Reconnaissance

To gather information without alerting the target.

To directly interact with the target and gather information.

To exploit vulnerabilities in the target's system.

To create a network map of the target.

Using Nessus to identify vulnerabilities.

Scanning for open ports using ScanList.

Downloading a website's code using Curl.

Listening to employee conversations.

Yes

No

It is limited to analyzing data packets.

It only gathers publicly available information.

It can alert the target to your activities.

It requires expensive tools.

The Harvester

Shodan

DNS Enum

Nessus

To scan for open wireless networks.

To brute force DNS information.

To identify vulnerabilities in a target's system.

To download website resources offline.