Red Team Reconnaissance Techniques

Item: Red Team Reconnaissance Techniques
Rating: 4
Author: PostSingularity Institute

by HackerSploit · View the channel on PSI

Applied Sciences & Engineering Computing & Cybersecurity URComputer security URHComputer fraud and hacking

🎙 HackerSploit 👥 1.0M 📅 October 30, 2021 ⏱ 87 min 👁 197K 📄 tutorial 🧭 2026-10-09

Available in: English (current) Français

Keywords

reconnaissanceactive reconpassive reconOSINTMITRE ATT&CK

Summary

The video provides a comprehensive overview of reconnaissance techniques for red team operations, emphasizing the distinction between active and passive methods. It begins by explaining the concept of reconnaissance and its role in the adversary lifecycle, referencing the MITRE ATT&CK framework. The practical demonstration starts with passive information gathering using command-line tools like host, nslookup, traceroute, DNSrecon, WAFW00F, and dig to enumerate DNS records and identify protective measures such as Cloudflare. The host then explores web-based services like Netcraft, DNSDumpster, and WhatWeb to extract technology stacks, SSL certificate details, and server-side information. For employee and organization OSINT, the theHarvester tool is used to collect emails and names from search engines and social media. The video also highlights the importance of legal permissions for active reconnaissance and mentions automation frameworks like Sn1per and Amass, which are covered further in part two of the series.

143 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video offers practical value by demonstrating a wide range of reconnaissance tools and techniques, balancing theoretical explanations with hands-on examples. The argumentation is logical, progressing from basic DNS queries to more complex OSINT and web profiling. It effectively illustrates how passive information can be used to build a target profile, while emphasizing legality and permission. However, the depth of explanation for some tools is limited, and the video primarily serves as an introductory walkthrough rather than a deep-dive into each technique’s underlying mechanisms. The reliance on open-source tools and the MITRE framework strengthens its credibility, though no comparative analysis or real-world case studies are provided.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates scientific rigor by referencing the MITRE ATT&CK framework, a widely-accepted knowledge base for adversary tactics, and by using open-source tools with documented sources (Sn1per, Amass). The techniques shown are consistent with established cybersecurity practices. The title accurately reflects the content, focusing specifically on reconnaissance techniques. No comments were provided for analysis, so public reception cannot be assessed.

181 words

Title / Content Match

The title accurately reflects the content, covering both active and passive reconnaissance techniques.

Quality & Reliability

7/10

The video is a practical tutorial from an established cybersecurity channel, demonstrating well-known tools and techniques. It relies on official sources like MITRE ATT&CK and open-source tools, but lacks peer-reviewed citations.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

MITRE ATT&CK Framework — Referenced as the basis for reconnaissance tactics and techniques
Sn1per - Reconnaissance Framework — Mentioned as a tool for automated reconnaissance
OWASP Amass - Attack Surface Mapping — Mentioned as a tool for DNS enumeration and attack surface discovery
HackerSploit Writeup: Red Team Reconnaissance Techniques — Companion writeup provided in description

Concurring Sources

MITRE ATT&CK Framework — Provides authoritative classification of reconnaissance tactics and techniques used in the video
HackerSploit Writeup — Aligns with the video content and offers additional notes

External References

Contribution & Novelties

The video contributes as an accessible tutorial consolidating multiple reconnaissance techniques and tools into a single workflow, valuable for beginners and intermediate practitioners in red teaming. It demonstrates the practical application of passive reconnaissance to uncover infrastructure details, technologies, and personnel information, aligning with MITRE ATT&CK tactics. While not introducing novel methods, it effectively organizes and illustrates the process, making it a useful learning resource.

Pour aller plus loin :

Open-source intelligence (Wikipedia) — Core concept underlying passive recon.
MITRE ATT&CK: Reconnaissance — Official tactic list and techniques.
DNS enumeration (Wikipedia) — Technical background for several tools demonstrated.

98 words

Radar Profile

The radar profile shows strong scores in information quantity and reliability, with slightly lower technical depth, indicating a comprehensive but accessible tutorial well-suited for introductory red team training.

Reliability 7/10