Reconnaissance Courses and Certifications

Packt

Foundations and Reconnaissance Techniques

Learn penetration testing foundations and reconnaissance: scoping engagements under GDPR and PCI-DSS, applying NIST and MITRE ATT&CK, and running DNS recon, host discovery, vulnerability scanning and Nmap.

• Coursera
• 2 weeks, 4 hours a week
• Self-Paced
• Paid Course

Ethical Hacking: Reconnaissance Techniques

Learn footprinting, network scanning, and enumeration: profile targets passively and actively, map live hosts and open ports, and extract usernames and shares using Shodan, Maltego, and Recon-NG.

• Coursera
• 4 hours 48 minutes
• Self-Paced
• Paid Course

This course covers basic scanning, enumeration, and vulnerability scanning as part of a penetration test.

• Cybrary
• 8-9 hours
• Self-Paced
• Paid Course

Learn foundational reconnaissance techniques using search engines, DNS zone transfers, WHOIS, social media, and Google Dorking.

• Cybrary
• Self-Paced
• Paid Course

Learn to scan networks, enumerate target systems, identify vulnerabilities, and document network terrain through virtual labs.

• Cybrary
• 2-3 hours
• Self-Paced
• Paid Course

This course delves into the crucial aspects of identifying and analyzing network services, a fundamental step in the penetration testing lifecycle. You will gain in-depth knowledge of using the Nmap S

• INE
• 9 hours
• Self-Paced
• Paid Course

Recon and Vulnerability Detection Bootcamp

Reconnaissance and vulnerability detection are foundational skills required for penetration testing, vulnerability assessments, and vulnerability management. These skills are the first steps of conduc

• INE
• 8 hours
• Self-Paced
• Paid Course

Assessment Methodologies: Information Gathering

Information gathering is the first step of any penetration test and is arguably the most important as all other phases rely on the information obtained about the target during the information gatherin

• INE
• 6 hours
• Self-Paced
• Paid Course

NahamSec

Live Recon and Distributed Recon Automation Using Axiom

Learn live reconnaissance and distributed recon automation with Axiom.

• YouTube
• 1 hour 10 minutes
• Self-Paced
• Free Video

NahamSec

Live Recon and Google Dorking on the Department of Defense Vulnerability Disclosure Program

Live reconnaissance and Google dorking demonstrate how to investigate the Department of Defense Vulnerability Disclosure Program.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Free Video

NahamSec

Live Recon on Snapchat - Demonstration of Amass, FFUF, and SecurityTrails

A live demonstration of reconnaissance on Snapchat using amass, FFUF, and SecurityTrails.

• YouTube
• 1 hour 42 minutes
• Self-Paced
• Free Video

Bugcrowd

GitHub Recon and Sensitive Data Exposure

Learn how to find a target company’s GitHub repositories and identify sensitive data exposed in them.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

HackerSploit

DNS Enumeration Tutorial - Dig, Nslookup & Host

Use dig, nslookup, and host to manually query DNS records for active information gathering.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

NahamSec

Recon Course and Methodology for Bug Bounty Hunters

Discover essential reconnaissance techniques and methodologies to enhance your bug bounty hunting skills and find more vulnerabilities effectively.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

NahamSec

Bug Bounty Recon Basics - Part 1

Bug bounty reconnaissance through target selection, subdomain enumeration, Google dorking, ASN mapping, Shodan, reverse Whois, and certificate transparency.

• YouTube
• 1 hour 30 minutes
• Self-Paced
• Free Video