Passive Recon

Stelthy but slower

Passive Recon

• No Interaction

• no trace or evidence

• no alerting victim

• No using scanners

• Dumpster diving

Software tools

• Netcaft.com - 3rd party proxy

• shodan.io

• Social media

• Search Engines

When passive recon fails

• New public-facing systems

• Not enough information publically available