Open-Source Intelligence (OSINT) with Recon-ng

Open-Source Intelligence (OSINT) with Recon-ng
Released 3/2026
By Ricardo Reimao
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch

When conducting a red team exercise or penetration test against a large organization, one of the most important steps is identifying domains, emails and hosts related to your target.

What you’ll learn
When conducting a red team exercise or penetration test against a large organization, one of the most important steps is identifying domains, emails and hosts related to your target. Using a centralized framework for OSINT and enumeration can help save time during this phase.
First, you’ll explore the basics of OSINT and the Recon-ng tool. Next, you’ll discover how to enumerate domains and email addresses using open-source intelligence. Finally, you’ll learn how to automate the OSINT process with scripts and create reports based on the data you gather.
When you finish this course, you will have the skills and knowledge of Recon-ng needed to perform a comprehensive OSINT enumeration.