OSINT & Reconnaissance
Find what people leave behind — and connect the dots.
- Estimated time
- 1 hour
- Rooms
- 1 room
- Points
- 250 pts
- Enrolled
- 1 learner enrolled
About this path
Open-source intelligence is the quiet first phase of almost every engagement: before anyone touches a target, they map its people, its services, and the breadcrumbs it has scattered across the public web. This path builds that discipline — correlating identities across surfaces, reading the metadata files quietly carry, and chaining small public disclosures into real access — all against self-contained, fictional targets so you practise the method without ever touching a real person or site.
Who should start here
Analysts, pentesters, and investigators who want a structured, hands-on introduction to reconnaissance and identity correlation.
Prerequisites
A browser, curl, and a metadata tool like exiftool. Comfort reading web pages and following links. No exploitation required.
What you will be able to do
- Correlate a real name to online handles across multiple surfaces
- Extract intelligence from file metadata (EXIF/document properties)
- Use breadcrumbs like robots.txt and pinned notes to reach unlinked content
- Chain public disclosures into access to a forgotten service
- Work recon methodically and ethically against scoped targets
Curriculum
Module 1 — Identity & metadata correlation0 of 1 rooms complete
One person, many footprints.