SET

Reconnaissance – or recon – is an information-gathering stage of an operation. It is commonly used in the context of military and intelligence operations worldwide, but you will also often see references to it in cybersecurity since it is one of the initial stages of most cyberattack frameworks. Depending on the framework you follow, to include custom frameworks, some might include planning and design phases before reconnaissance. It might include the discovery of security flaws, or potential entry points for attackers. It plays a vital role in the overall success of a penetration test – for that matter, also for the success of criminal activity. The process involves collecting data about the target to better understand its infrastructure, weaknesses, and overall assets.

One of the most popular vectors of attack is the people who operate those resources. If a pentester or attacker can successfully compromise any person, or person’s credentials then...