NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
Reconnaissance Methodology
Master the art of the footprint. Differentiate passive and active recon, leverage OSINT, enumerate subdomains, and weaponize search engines before you ever touch the target network.
Room tasks
1What is Reconnaissance?
2Passive vs Active Recon
3Subdomain Enumeration
4Google Dorking Fundamentals
5Guided Lab: Full OSINT Profile on Target
Frequently Asked Questions
What is reconnaissance in ethical hacking?
Reconnaissance is gathering information about a target before testing. It helps testers understand the attack surface, technologies, people, and exposed services.
What is the difference between passive and active recon?
Passive recon collects public information without touching the target, such as search engines and records. Active recon directly interacts with target systems, for example by scanning ports, and can be detected.
Why is OSINT useful for pentesters?
Open-source intelligence reveals domains, employees, leaked data, and technologies without any interaction with the target. This free Codelivly room teaches how to gather and use it.