NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cloud Security
Cloud Reconnaissance
Master cloud reconnaissance techniques. Learn to enumerate assets, map attack surfaces, and gather intelligence without triggering alarms.
Room tasks
1What Is Cloud Reconnaissance and Why Does It Matter
2Enumerating Cloud Assets and Public Exposure
3Recon with ScoutSuite and CloudFox
4Guided Lab: Mapping the Attack Surface of a Cloud Account
Frequently Asked Questions
What is cloud reconnaissance?
It is the process of discovering information about a target's cloud footprint, such as storage buckets, domains, services and identities, before an assessment or attack.
What is the difference between passive and active recon?
Passive recon uses public sources like DNS records and certificate logs without touching the target. Active recon interacts directly with services and may be detected, so it needs authorization.
What can recon reveal about a cloud environment?
It can expose public buckets, forgotten subdomains, leaked keys and naming patterns that guide further testing. This intermediate Codelivly room is free and focuses on authorized assessment skills.