--- title: Recon & OSINT Basics for HACKERS! | daily.dev description: An overview of reconnaissance techniques used by hackers, covering both passive and active recon. Passive recon includes Google Dorking, social media... canonical: https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Recon & OSINT Basics for HACKERS! | daily.dev og:description: An overview of reconnaissance techniques used by hackers, covering both passive and active recon. Passive recon includes Google Dorking, social media... og:url: https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps og:image: https://api.daily.dev/og/posts/OsnhghqPS.png og:image:alt: Recon & OSINT Basics for HACKERS! og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Recon & OSINT Basics for HACKERS! **[An0n Ali](https://daily.dev/sources/an0n_ali)** · 7 min read · 0 upvotes · 0 comments ## Summary An overview of reconnaissance techniques used by hackers, covering both passive and active recon. Passive recon includes Google Dorking, social media intelligence, identity and account discovery via tools like PimEyes and Epieos, and data breach analysis. Active recon covers network scanning with Nmap, web directory enumeration with ffuf, technology fingerprinting with Wappalyzer, and physical wireless signal interception. The video also discusses staying anonymous during active recon using isolated browser-streamed environments like Kasm Workspaces routed through a VPN gateway. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the difference between passive and active reconnaissance in hacking? Passive reconnaissance gathers information about a target without any direct interaction, such as through Google Dorking, social media intelligence, or breach data analysis, leaving no trace the target could detect. Active reconnaissance involves directly engaging the target, such as scanning a server's open ports with Nmap or fuzzing a website with ffuf, which risks exposing the attacker's IP or identity. _daily.dev surfaces security explainers for those weighing passive versus active recon approaches in engagements._ ### What tools can be used to find all online accounts linked to a single username or email address? instantusername.com takes a single username and surfaces every account tied to it across the internet, while Epieos takes an email address and reveals linked accounts, including a person's Google Maps reviews. Facial recognition tools like PimEyes and FaceCheck.ID can also match a single photo against a database of faces online. _developers exploring OSINT tooling can find breakdowns like this on daily.dev._ ### What did Kasm Workspaces add in its 1.19 release? Kasm Workspaces added native OpenZiti support in its 1.19 release, allowing a session to be locked down so it can only reach specific, approved services. This helps keep a browser-streamed workspace session tightly contained and prevents it from reaching unapproved destinations. _daily.dev tracks tooling updates like this for engineers securing isolated remote environments._ ## Similar posts on daily.dev - [Mastery Hunt: Hidden API Endpoints — A Deep Dive into API Bug Bounty Recon & Exploitation](https://daily.dev/posts/mastery-hunt-hidden-api-endpoints-a-deep-dive-into-api-bug-bounty-recon-exploitation-rtjbdj8ju) · InfoSec Write-ups · 0 upvotes · 0 comments - [Breaking down red team tactics: How hackers actually breach systems](https://daily.dev/posts/breaking-down-red-team-tactics-how-hackers-actually-breach-systems-tlwmycbvy) · All Things Open · 6 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#osint](https://daily.dev/tags/osint) [View this post on daily.dev](https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Recon & OSINT Basics for HACKERS!","url":"https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps"},"datePublished":"2026-07-16T14:03:38.340Z","dateModified":"2026-09-13T18:27:16.147Z","description":"An overview of reconnaissance techniques used by hackers, covering both passive and active recon. Passive recon includes Google Dorking, social media...","image":"https://i.ytimg.com/vi/UfV9ZLgJi1w/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/UfV9ZLgJi1w/sddefault.jpg","isAccessibleForFree":true,"articleSection":"An0n Ali","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"An0n Ali","logo":"https://media.daily.dev/image/upload/s--FDbuqNiP--/f_auto/v1723788734/logos/an0n_ali","url":"https://daily.dev/sources/an0n_ali"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,osint","timeRequired":"PT7M","video":{"@type":"VideoObject","name":"Recon & OSINT Basics for HACKERS!","description":"An overview of reconnaissance techniques used by hackers, covering both passive and active recon. Passive recon includes Google Dorking, social media...","thumbnailUrl":"https://i.ytimg.com/vi/UfV9ZLgJi1w/sddefault.jpg","uploadDate":"2026-07-16T14:03:38.340Z","duration":"PT7M","url":"https://api.daily.dev/r/OsnhghqPS","embedUrl":"https://www.youtube.com/embed/UfV9ZLgJi1w"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"An0n Ali","item":"https://daily.dev/sources/an0n_ali"},{"@type":"ListItem","position":3,"name":"Recon & OSINT Basics for HACKERS!"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/recon-osint-basics-for-hackers--osnhghqps#faq","mainEntity":[{"@type":"Question","name":"What is the difference between passive and active reconnaissance in hacking?","acceptedAnswer":{"@type":"Answer","text":"Passive reconnaissance gathers information about a target without any direct interaction, such as through Google Dorking, social media intelligence, or breach data analysis, leaving no trace the target could detect. Active reconnaissance involves directly engaging the target, such as scanning a server's open ports with Nmap or fuzzing a website with ffuf, which risks exposing the attacker's IP or identity. daily.dev surfaces security explainers for those weighing passive versus active recon approaches in engagements."}},{"@type":"Question","name":"What tools can be used to find all online accounts linked to a single username or email address?","acceptedAnswer":{"@type":"Answer","text":"instantusername.com takes a single username and surfaces every account tied to it across the internet, while Epieos takes an email address and reveals linked accounts, including a person's Google Maps reviews. Facial recognition tools like PimEyes and FaceCheck.ID can also match a single photo against a database of faces online. developers exploring OSINT tooling can find breakdowns like this on daily.dev."}},{"@type":"Question","name":"What did Kasm Workspaces add in its 1.19 release?","acceptedAnswer":{"@type":"Answer","text":"Kasm Workspaces added native OpenZiti support in its 1.19 release, allowing a session to be locked down so it can only reach specific, approved services. This helps keep a browser-streamed workspace session tightly contained and prevents it from reaching unapproved destinations. daily.dev tracks tooling updates like this for engineers securing isolated remote environments."}}]} ```