Course 34 - Cybersecurity Kill Chain | Episode 1: Reconnaissance and Footprinting Fundamentals

In this lesson, you’ll learn about: reconnaissance in the Cyber Kill Chain1. What is Reconnaissance?Reconnaissance is the first phase of the Cyber Kill ChainIt focuses on:Gathering information about a target👉 Why it matters:It forms the foundation of the entire attackPoor recon = weak attackStrong recon = precise targeting2. Passive Reconnaissance (Footprinting)🔹 DefinitionCollecting information without directly interacting with the target👉 Low risk of detection🔹 Common Techniques🌐 Network Information GatheringTools like:whois → domain ownership & contactsnslookup → DNS & IP mapping🔍 Search Engines & Specialized PlatformsShodanCensysUsed to find:Open portsRunning servicesTechnologies used👥 Social Media Intelligence (OSINT)LinkedInEmployee rolesTech stack hintsFacebookPersonal interestsBehavior patterns👉 Useful for:Phishing attacksSocial engineering🗑️ Physical Recon (Dumpster Diving)Searching discarded materials for:PasswordsInternal documentsConfigurations3. Active Reconnaissance🔹 DefinitionDirect interaction with the target system👉 Higher risk of detection🔹 Common Techniques📡 Ping SweepsIdentify:Live hosts on a network🔎 Port Scanning & FingerprintingTool:NmapUsed to detect:Open ports (e.g., SSH, FTP, VNC)Operating system details4. Passive vs Active ReconTypeInteractionRisk LevelExamplePassiveNoLowShodan, LinkedInActiveYesHighNmap scan5. Why Reconnaissance is CriticalBuilds a complete target profileIdentifies:Weak pointsEntry pointsMakes later stages:FasterMore effectiveKey TakeawaysRecon = information gathering phasePassive recon is stealthy and preferredActive recon is powerful but detectableTools like Shodan and Nmap reveal technical exposureSocial media provides human attack vectorsBig PictureReconnaissance is where attackers:👉 Move from guessing → knowingInstead of blind attacksThey perform data-driven targetinYou can listen and download our episodes for free on more than 10 different platforms:https://linktr.ee/cybercode_academy