Public Sources or Entering Property?

About this interactive

The lesson makes one point sharply: research from public sources is something a tester can do freely, but the moment reconnaissance needs you to physically enter the target's property or take what belongs to it, the lesson warns it can cross into an attack with legal consequences. Public-source actions read what the organization or others have already published or exposed: a website, a search result, a registration record, a public profile. Entering or taking means climbing into the company's dumpster, lifting discarded documents from its bins, walking onto its fenced property, tailgating through a controlled door. The axis here is not whether the target notices you — dumpster diving is quiet — but whether you had to set foot on their property or carry off their things. (Exact legality varies by place; this follows the line the lesson draws.)

What you'll learn

Tell reconnaissance done from public sources, which the lesson treats as staying within legal bounds, from reconnaissance that physically enters the target's premises or removes its property, such as dumpster diving, which the lesson flags as carrying legal risk
Explain why the lesson warns that in-person methods can cross from research into an attack with legal consequences

Aligned to

CompTIA PenTest+

2.1 Given a scenario, apply information gathering techniques.

CompTIA Security+

2.2 Explain common threat vectors and attack surfaces.

Key terms

Reconnaissance: The first phase of an attack in which an adversary gathers information about a target — such as open ports, employee names, and technology stacks — before launching an attack. Reconnaissance can be passive (using public sources) or active (directly probing the target).
Dumpster Diving: A physical reconnaissance technique where an attacker searches through an organization's discarded trash to find sensitive information that was not properly destroyed.
Passive Reconnaissance: An intelligence-gathering phase in which an attacker collects information about a target using only publicly available sources — such as WHOIS records, job postings, and social media — without directly interacting with the target's systems.
Active Reconnaissance: Intelligence gathering that involves direct interaction with a target system, such as port scanning or vulnerability scanning, which may trigger alerts.

Topics

Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →