What is Reconnaissance?

Reconnaissance (recon) is the first phase of a penetration test or attack, focused on gathering information about the target. Passive reconnaissance involves collecting publicly available data without directly interacting with the target, while active reconnaissance involves direct probing such as port scanning or DNS enumeration. The information gathered during recon helps testers identify potential attack vectors and plan their approach.