Module objectives

Recon & OSINT

Reconnaissance is the first move in almost every engagement, and most of it is open-source: information an organisation exposes without ever being touched. This module builds that skill from the ground up.

By the end you will be able to:

• Run the intelligence cycle against a target instead of searching at random.
• Map a domain's infrastructure from DNS, WHOIS and certificate-transparency records.
• Pivot across people, usernames and email formats from public profiles.
• Use search operators and specialist engines to surface exposed files and services.
• Pull location and identity signals from images and breach data, and know the legal line.

The exam is practical: ten real artifacts to work on, graded in your browser. Get seven of ten and the certificate is yours.