Do not make this mistake when it comes to passive information gathering

Description

When performing a pentest or performing a bounty hunt, you should always consider passive information gathering first. It’s the least intrusive step you can take and it can bring you some very valuable information. This step is often overlooked, don’t make the same mistake.

Passive information gathering is the act of using public information, usually acquired on the internet, to further the cause of an ethical hacker. This can be something as simple as an employee…