How to Recon Like A Boss

Reconnaissance, or recon for short, is the process of gathering information about a target with the goal of identifying vulnerabilities and potential attack vectors.

Effective recon is an essential part of any successful web security assessment or penetration testing engagement. However, many beginners find the process daunting and overwhelming, with a seemingly endless array of tools and techniques to choose from.

In this article, we’ll take a step-by-step approach to web recon, starting with the basics and building up to more advanced techniques.

Agenda

• Increase Your Attack Area
  • Determine Technologies used by Website.
  • Amazon Web Service (AWS) Recon & Hacking
  • Github Recon
  • Content Discovery

Increase Your Attack Area

Recon- Go Back in Time

Wayback Machine to view old files like robots.txt
and URLs

Tools are out to automate this

waybackurls.py

Download:

https://gist.github.com/mhmdia/adf6bff70142e5091792841d4b372050

waybackrobots.py

Download: