Reconnaissance with Sn1per from Pluralsight

Reconnaissance is one of the most important stages of a red team exercise. In this course, we cover the Sn1per tool, which allows you to perform passive and active reconnaissance against your target.

The first and most important phase of a red team engagement is reconnaissance. It is during this phase that you gather valuable information about your target, such as IP addresses, sub-domains, open ports and even potential vulnerabilities to be exploited.

In this course, Reconnaissance with Sn1per, we cover one of the most complete tools for recon, called Sn1per.

First, you will learn how to use this tool to perform active and passive scans against the Globomantics corporation. Then, you will learn how to use Sn1per to perform a stealth scan (using OSINT techniques) against a public domain.

This course covers several important tactics from the MITRE ATT&CK framework, including: Active Scanning (T1595), Gather Victim Host Information (T1592), Gather Victim Network Information (T1590), Search Open Technical Databases (T1596), Search Open Websites/Domains (T1593) and Gather Victim Identity Information (T1589).

In this course, you will learn how to use the Sn1per tool to automate reconnaissance tasks and save time.

Active reconnaissance is a type of computer attack in which an intruder engages with the targeted system to gather information about vulnerabilities.

Passive reconnaissance is an attepmt to gain information about targeted computers and networks without engaging with the systems.

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilites.

There are no prerequisites for this cyber security course.

What's inside

Syllabus

Traffic lights

Read about what's good

what should give you pause

and possible dealbreakers

Teaches red team techniques and reconnaissance tactics, which are valuable skills for cybersecurity professionals

Covers active and passive reconnaissance techniques, which are essential for gathering information on target systems

Utilizes the Sn1per tool, which is an industry-standard tool for reconnaissance and vulnerability scanning

Provides hands-on labs and interactive materials, which enhance the learning experience

Taught by Ricardo Reimao, who is recognized for his work in cybersecurity

Requires no prerequisites, making it accessible to beginners

Reviews summary

Sn1per for practical reconnaissance

According to students, this course offers a practical and efficient way to automate reconnaissance using the Sn1per tool. Many found the hands-on demonstrations highly valuable, enabling them to immediately apply their learning in real-world scenarios. The instructor's delivery is generally clear and engaging. While effective for those new to Sn1per or seeking automation, some learners noted a lack of advanced depth or found the 'no prerequisites' claim slightly misleading for those without basic command-line or networking familiarity. Overall, it's considered a solid introduction for pen testers, though experienced users might desire more comprehensive coverage.

Better for beginners; not deep enough for advanced users.

"I already had some recon experience, so some parts felt a bit slow, but for a beginner, it's probably perfect."

"I found the course introduces Sn1per but doesn't go deep enough for me as an experienced user. It's more of an introductory overview."

"I wish it covered more advanced features or custom scripting with Sn1per."

Instructor provides clear explanations and engaging delivery.

"The instructor explains Sn1per's features clearly and the hands-on demos are incredibly useful."

"The instructor's delivery is engaging."

"The instructor does a good job explaining the tool. I found it easy to follow along."

Focuses on hands-on learning and immediate use of the tool.

"The hands-on demos are incredibly useful. I learned how to integrate it into my workflow immediately."

"The practical exercises are spot on, and the instructor's delivery is engaging. I especially liked the focus on MITRE ATT&CK tactics."

"A must-have for pen testers... The real-world examples given are highly relevant. Very happy with the practical takeaways."

"Very practical and to the point... the hands-on labs were beneficial. It saved me a lot of time learning Sn1per on my own."

Reviewers desire more in-depth content and current material.

"I found the explanations sometimes lacked depth, especially when troubleshooting common issues."

"Some of the content felt slightly outdated, and I had to look up recent changes to the tool myself."

"I would have liked to see more challenges or complex scenarios."

Some learners struggled with assumed technical background.

"I struggled with the setup and some of the commands in the course. It felt like the 'no prerequisites' claim was a bit misleading."

"While it doesn't assume you know Sn1per, it does assume a certain level of command-line and networking familiarity that I didn't quite have."

"Some demonstrations didn't work as expected on my machine, and there wasn't enough troubleshooting guidance."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Reconnaissance with Sn1per with these activities:

Build a cheat sheet of Sn1per commands and flags

Show steps

Having a cheat sheet will readily provide you with the commands and flags you need.

Show steps

Gather a list of Sn1per commands and flags
Organize the commands and flags into a cheat sheet

Review the MITRE ATT&CK framework

Show steps

Reviewing the framework will help strengthen your foundational knowledge and understanding.

Browse courses on MITRE ATT&CK

Show steps

Visit the MITRE ATT&CK website
Read through the framework

Run Sn1per commands against public domains

Show steps

Practice using Sn1per to perform active reconnaissance against public domains.

Browse courses on Active Reconnaissance

Show steps

Set up target domain and run a Sn1per scan
Identify potential vulnerabilities or weaknesses

Five other activities

Expand to see all activities and additional details

Show all eight activities

Attend a workshop on Sn1per and reconnaissance

Show steps

Attend a workshop to gain exposure to other professionals using Sn1per and to learn from their experiences.

Show steps

Find a Sn1per workshop
Register for the workshop

Write a blog post about using Sn1per for reconnaissance

Show steps

Create a detailed blog post that provides a comprehensive guide to using Sn1per for reconnaissance.

Show steps

Gather information about Sn1per
Write a draft of your blog post
Edit and publish your blog post

Participate in a bug bounty program using Sn1per

Show steps

Participating in a bug bounty program using Sn1per will enhance your reconnaissance skills and gain real-world experience.

Show steps

Join a reputable bug bounty program
Identify a target program
Use Sn1per to perform reconnaissance on the target program
Identify and report bugs

Mentor junior red teamers on using Sn1per

Show steps

Mentoring others to use Sn1per can help deepen your understanding of the concepts and broaden your own practical experience.

Show steps

Identify a junior red teamer who wants to learn about Sn1per
Set up a regular meeting schedule
Provide guidance and support as the junior red teamer learns Sn1per

Contribute to the development of the Sn1per tool

Show steps

Contribute real and practical support by extending the tool's functionalities or updating the documentation.

Show steps

Find a Sn1per project to contribute to
Make a pull request

Career center

Learners who complete Reconnaissance with Sn1per will develop knowledge and skills that may be useful to these careers:

Network Security Engineer

Network Security Engineers design, implement, and maintain security measures to protect computer networks and data from unauthorized access, use, disclosure, disruption, modification, or destruction. Some of the tools and techniques that you will learn in the "Reconnaissance with Sn1per" course, such as active and passive scanning, are essential for performing network security assessments and identifying potential vulnerabilities.

See salaries and explore the career path for Network Security Engineer

Information Security Analyst

Information Security Analysts plan and implement security measures to protect an organization's computer networks and systems. They also monitor and investigate security breaches. The "Reconnaissance with Sn1per" course teaches you how to use Sn1per to perform reconnaissance, which is a critical skill for Information Security Analysts.

See salaries and explore the career path for Information Security Analyst

Penetration Tester

Penetration Testers are ethical hackers who are hired to test the security of computer networks and systems. They use a variety of techniques, including reconnaissance, to identify vulnerabilities that could be exploited by attackers.

See salaries and explore the career path for Penetration Tester

Security Consultant

Security Consultants provide advice and guidance to organizations on how to improve their security posture. They also help organizations to develop and implement security policies and procedures. The "Reconnaissance with Sn1per" course can help you to develop the skills and knowledge that you need to succeed as a Security Consultant.

See salaries and explore the career path for Security Consultant

Cybersecurity Analyst

Cybersecurity Analysts monitor and analyze security events to identify and mitigate threats. They also work to improve the security of an organization's computer networks and systems.

See salaries and explore the career path for Cybersecurity Analyst

Computer Forensic Analyst

Computer Forensic Analysts investigate computer crimes and collect evidence from computers and other digital devices.

See salaries and explore the career path for Computer Forensic Analyst

SOC Analyst

SOC Analysts monitor and analyze security events in a Security Operations Center (SOC).

See salaries and explore the career path for SOC Analyst

IT Auditor

IT Auditors evaluate the security of an organization's computer networks and systems.

See salaries and explore the career path for IT Auditor

Compliance Analyst

Compliance Analysts ensure that an organization complies with applicable laws and regulations.