Web Reconnaissance 101

Gather intelligence on web targets. Learn subdomain enumeration, directory brute-forcing, and fingerprinting.

Overview

Reconnaissance is 80% of hacking. This course teaches you to discover subdomains, identify technologies, find hidden directories, and map out a target’s attack surface using free tools.

What you will learn

  • Use tools like Sublist3r and Amass for subdomain enumeration
  • Perform directory brute-forcing with ffuf and dirb
  • Fingerprint web technologies using WhatWeb and Wappalyzer
  • Map out a target’s attack surface from reconnaissance data

Syllabus

A structured path through every lesson: What is Reconnaissance?, WHOIS & DNS Enumeration, Subdomain Enumeration, Directory Brute-Forcing, Technology Fingerprinting, Building a Recon Report, Google Hacking & Advanced Dorking, Automating Recon with Scripts.