All Rooms

Passive Reconnaissance

easy30 mintryhackme

Introduction to passive reconnaissance — gathering information about a target without directly interacting with their systems. Covers WHOIS lookups, DNS queries (nslookup, dig), DNSDumpster for subdomain discovery, and Shodan.io for internet-facing device intelligence. No machines to deploy — all queries against public services.

Skills You Will Learn

passive-reconwhoisdns-enumerationosintshodan

Prerequisites

  • networking-basics

Walkthrough Phases

1

Passive vs Active Recon

Understand the difference and why it matters legally

2

Passive Recon Tools

Use WHOIS, DNS, DNSDumpster, and Shodan

13 questions to answer

alienrecon start thm-passiverecon

Don't have AlienRecon? Get started here