{"id":86867,"date":"2023-02-03T10:13:00","date_gmt":"2023-02-03T10:13:00","guid":{"rendered":"https:\/\/cloudnewshub.com\/?p=86867"},"modified":"2023-02-03T10:13:00","modified_gmt":"2023-02-03T10:13:00","slug":"passive-reconnaissance","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=86867","title":{"rendered":"passive reconnaissance"},"content":{"rendered":"<p><!-- ContentItemController, generated at 11:51:05 Fri Feb 3, 2023, by cds12 --> <\/p>\n<section id=\"contributors-block\">\n<div class=\"main-article-author v2\">\n<div class=\"image-resize\"> <img decoding=\"async\" src=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance.jpg\" alt=\"Robert Sheldon\"> <\/div>\n<p> <span>By<\/span> <\/div>\n<\/section>\n<section class=\"section definition-section\" data-menu-title=\"Definition\" id=\"content-body\">\n<section class=\"section main-article-chapter\" data-menu-title=\"What is passive reconnaissance?\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>What is passive reconnaissance?<\/h3>\n<p>Passive reconnaissance is an attempt to gain information about targeted computers and networks without actively engaging with the systems. In <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/active-reconnaissance\">active reconnaissance<\/a>, in contrast, the attacker engages with the target system, typically conducting a port scan to find any open ports.<\/p>\n<p>The term <em>reconnaissance<\/em> comes from its military use to describe an information-gathering mission. In computing and networking, both passive and active reconnaissance are sometimes referred to as <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/passive-attack\">passive attacks<\/a> because the purpose is simply to obtain information, rather than to actively exploit the target. However, reconnaissance is commonly used when preparing for an attack against a target system.<\/p>\n<figure class=\"main-article-image full-col\" data-img-fullsize=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance-2.jpg\"> <img data-src=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance-1.jpg\" class=\"lazy\" data-srcset=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance-1.jpg 960w,http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance-2.jpg 1280w\" alt=\"Graphic showing 10 common attach vectors\" height=\"378\" width=\"558\"><figcaption> <i class=\"icon pictures\" data-icon=\"z\"><\/i>With passive reconnaissance cybercriminals attempt to gain information about targeted computers and networks without actively engaging those systems. <\/figcaption><\/figure>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Why do cybercriminals do passive reconnaissance?\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Why do cybercriminals do passive reconnaissance?<\/h3>\n<p>The main idea behind passive reconnaissance is to discover as much relevant information as possible about the target organization and its infrastructure without being detected. Cybercriminals attempt to achieve this in several ways:<\/p>\n<ul class=\"default-list\">\n<li><strong>Open source intelligence (<\/strong><a href=\"https:\/\/osint.org\/\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>OSINT<\/strong><\/a><strong>).<\/strong> Would-be attackers gather information from publicly available sources, typically via the internet. Collected data can come from a wide range of sources and include specific details about the target organization and its employees, including email addresses, phone numbers, IP addresses, domain names, suppliers, deployed technologies, geographic locations and social networking accounts. Cybercriminals can find most of this data by using search engines such as Google or Bing, as well as tools such as <a href=\"https:\/\/www.geeksforgeeks.org\/python-theharvester-how-to-use-it\/\" target=\"_blank\" rel=\"noopener noreferrer\">theHarvester<\/a>, a command-line utility that uses popular search engines to more easily retrieve OSINT data. In some cases, the information that hackers discover is highly sensitive, making their jobs much easier.<\/li>\n<li><strong>Environmental assessments.<\/strong> In conjunction with their OSINT searches, cybercriminals will look specifically for details about the target organization&#8217;s operating environment. For example, they might try to discover what type of computers are being used, what <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/operating-system-OS\">operating systems<\/a> are running, which software has been installed, an application&#8217;s programming language and similar details about the organization&#8217;s infrastructure and its configuration. To find this information, the cybercriminals often use a variety of tools. For example, they might use <a href=\"https:\/\/www.gnu.org\/software\/wget\/\" target=\"_blank\" rel=\"noopener noreferrer\">Wget<\/a> to download files from a <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/Web-server\">web server<\/a> and then search those files for information about the environment, or they might use Netcraft, an internet security tool, to find specific details about a website such as <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/IP-address-Internet-Protocol-Address\">IP addresses<\/a>, domains or security certificate information. Hackers might also masquerade as authorized users to gain access to systems to learn more about the environment.<\/li>\n<li><strong>Network examination.<\/strong> Cybercriminals will also learn whatever they can about an organization&#8217;s network and its internet connections. For example, they&#8217;ll often search for Domain Name System (<a href=\"https:\/\/www.techtarget.com\/searchnetworking\/definition\/domain-name-system\">DNS<\/a>) information such as IP delegation, domain ownership or DNS record content. A tool such as Netcraft can also be useful for this type of research, as can tools such as <a href=\"https:\/\/www.techtarget.com\/searchnetworking\/definition\/nslookup\">nslookup<\/a> or <a href=\"https:\/\/github.com\/rfc1036\/whois\" target=\"_blank\" rel=\"noopener noreferrer\">whois<\/a>. Cybercriminals might also eavesdrop on an organization&#8217;s network traffic using <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/Wireshark\">Wireshark<\/a> or another packet sniffer. This is sometimes done in conjunction with <a href=\"https:\/\/www.techtarget.com\/searchmobilecomputing\/definition\/war-driving\">war driving<\/a>, the process of locating and possibly exploiting connections to wireless local area networks. In addition, cybercriminals might use a tool such as <a href=\"https:\/\/www.techtarget.com\/whatis\/definition\/Shodan\">Shodan<\/a> to identify vulnerable devices connected to the internet whose IP addresses belong to the target organization.<\/li>\n<li><strong>Physical searches.<\/strong> Would-be hackers are not above performing physical searches to get at sensitive information. This might include digging through trash or looking for data stored on discarded computers or other devices. Any discarded item represents a potential inroad.<\/li>\n<\/ul>\n<p> [embedded content] <\/p>\n<p>Both active and passive reconnaissance are also used by <a href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/ethical-hacker\">ethical hackers<\/a> to carry out attacks against a system to determine its vulnerabilities. These can then be addressed before the system falls prey to a real attack. Ethical reconnaissance is typically part of a larger <a href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/penetration-testing\">penetration testing<\/a> strategy that also incorporates steps such as network scanning and vulnerability assessment.<\/p>\n<figure class=\"main-article-image full-col\" data-img-fullsize=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance-1.png\"> <img data-src=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance.png\" class=\"lazy\" data-srcset=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance.png 960w,http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/02\/passive-reconnaissance-1.png 1280w\" alt=\"Graphic showing six steps in penetration testing\" height=\"560\" width=\"560\"><figcaption> <i class=\"icon pictures\" data-icon=\"z\"><\/i>Penetration testing at a glance. <\/figcaption><\/figure>\n<p>Cybercriminals use passive reconnaissance because they want to go unnoticed, so it can be very difficult for the target organization to detect. The organization&#8217;s best defense is to implement a layered protection strategy that includes comprehensive <a href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/firewall\">firewall<\/a> protection and an intrusion prevention system (<a href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/intrusion-prevention\">IPS<\/a>). The firewall should permit only essential traffic and limit port exposure. The IPS should detect port scans in progress and shut them down before hackers can gain a full map of the network. The organization should also conduct regular penetration testing and employ other security measures that protect against data leakage.<\/p>\n<p> [embedded content] <\/p>\n<p><em>Explore <\/em><a href=\"https:\/\/www.techtarget.com\/searchnetworking\/tip\/Explore-9-essential-elements-of-network-security\"><em>nine essential elements of network security<\/em><\/a><em> and <\/em><a href=\"https:\/\/www.techtarget.com\/searchsecurity\/feature\/The-five-different-types-of-firewalls\"><em>five different types of firewalls<\/em><\/a><em>.<\/em><\/p>\n<\/section>\n<\/section>\n<section id=\"publish-date\">\n<p> This was last updated in <span>February 2023<\/span> <\/p>\n<\/section>\n<section class=\"section continue-reading\" data-menu-title=\"Required Reading\" id=\"required-reading\">\n<h4 class=\"section-title\"> <i class=\"icon\" data-icon=\"m\"><\/i> Continue Reading About passive reconnaissance <\/h4>\n<\/section>\n<p> <!-- RelatedTermsController, generated at 11:53:32 Fri Feb 3, 2023, by cds12 --><\/p>\n<section class=\"section related-terms\" data-menu-title=\"Related Terms\" id=\"related-terms\"> <\/section>\n","protected":false},"excerpt":{"rendered":"<p>By What is passive reconnaissance? Passive reconnaissance is an attempt to gain information about targeted computers and networks without actively engaging with the systems. In active reconnaissance, in contrast, the attacker engages with the target system, typically conducting a port scan to find any open ports. The term reconnaissance comes from its military use to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":86868,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[533],"tags":[],"class_list":["post-86867","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it"],"_links":{"self":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/86867","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86867"}],"version-history":[{"count":0,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/86867\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/media\/86868"}],"wp:attachment":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86867"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86867"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86867"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}