← Back🔭

Passive Reconnaissance: OSINT Network Mapping

Pro
🔒

Pro scenario

Passive Reconnaissance: OSINT Network Mapping is part of the Pro tier — advanced networking topics including BGP routing, Zero Trust, DDoS attacks, QUIC, TLS certificate chains, and more.

This scenario covers

How attackers and penetration testers gather network intelligence without sending a single packet — DNS enumeration, BGP route data, certificate transparency, WHOIS, and Shodan searches.

Sign in first, then unlock Pro

See what's included in Pro →