CyberCode Academy

Course 35 - Footprinting and Reconnaissance | Episode 1: Methodology, OSINT Tools, and Lab Setup

Listen Later
In this lesson, you’ll learn about: footprinting, OSINT, and setting up a penetration testing lab1. Penetration Testing Methodology🔹 The First Rule: Legal Scope
  • Before any testing:
    • Define scope clearly
    • Get explicit permission
👉 Why it matters:
  • Protects you legally
  • Defines what systems you can test
  • Prevents unauthorized access issues
2. Footprinting & Reconnaissance🔹 Definition
  • The process of gathering information about a target before attacking
🔹 Types of Footprinting🟢 Passive Footprinting
  • No direct interaction with the target
  • Uses publicly available data
🔴 Active Footprinting
  • Direct engagement with the target
  • Higher risk of detection
🌐 OSINT (Open Source Intelligence)
  • Collecting intelligence from:
    • Public databases
    • Websites
    • Social platforms
3. Essential OSINT & Footprinting Tools🔹 Basic Network Tools
  • nslookup
    • DNS records and IP resolution
  • whois
    • Domain registration and ownership details
🔹 Search & Intelligence Platforms
  • Shodan
    • Discover exposed devices and services
🔹 Visual Intelligence Tool
  • Maltego
    • Maps relationships between:
      • Domains
      • Emails
      • Infrastructure
🔹 Website Analysis
  • HTTrack
    • Clone websites for offline analysis
🔹 Advanced Recon Frameworks
  • Recon-ng
  • theHarvester
👉 Used for:
  • Automated data collection
  • Email harvesting
  • Domain intelligence
4. Building a Safe Lab Environment🔹 Why You Need a Lab
  • Avoid testing on real systems
  • Practice safely and legally
  • Simulate real-world attacks
🔹 Virtualization Platform
  • Oracle VM VirtualBox
👉 Important:
  • Install:
    • Base platform
    • Extension Pack
🔹 Operating System for Pentesting
  • Kali Linux
👉 Includes:
  • Pre-installed security tools
  • Ready-to-use environment
5. Troubleshooting Setup
  • Always:
    • Follow guides specific to your OS (Windows / Linux / Mac)
    • Check virtualization support (VT-x / AMD-V)
Key Takeaways
  • Always start with scope and permission
  • Footprinting is the foundation of pentesting
  • OSINT provides powerful public intelligence
  • Tools automate and enhance data gathering
  • A lab environment is essential for safe practice
Big PictureThis phase is where you:👉 Move from zero knowledge → complete visibility
  • Understand the target
  • Map the attack surface
  • Prepare for deeper testing
Mental Model
  • Methodology → “What am I allowed to do?”
  • Footprinting → “What can I learn?”
  • Lab → “Where can I practice safely?”


You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
...more
View all episodesView all episodes
Download on the App Store
CyberCode AcademyBy CyberCode Academy