OSINT Reconnaissance for Attack Surface Discovery

Methodology and tooling for open-source intelligence (OSINT) gathering as the first phase of an authorized security assessment: passive and active recon, subdomain enumeration, internet-wide scanning indexes, dorking, an...