Featured resource
2025 Tech Upskilling Playbook
Tech Upskilling Playbook

Build future-ready tech teams and hit key business milestones with seven proven plays from industry leaders.

Check it out
  • Course

Open-Source Intelligence (OSINT) with Recon-ng

The first stage of an offensive security engagement is performing an OSINT enumeration. This course will teach you how to discover and aggregate target data using the Recon-ng tool.

Intermediate
20m

Created by Ricardo Reimao

Last Updated Mar 19, 2026

Course Thumbnail
  • Course

Open-Source Intelligence (OSINT) with Recon-ng

The first stage of an offensive security engagement is performing an OSINT enumeration. This course will teach you how to discover and aggregate target data using the Recon-ng tool.

Intermediate
20m

Created by Ricardo Reimao

Last Updated Mar 19, 2026

Get started today

Access this course and other top-rated tech content with one of our business plans.

Try this course for free

Access this course and other top-rated tech content with one of our individual plans.

This course is included in the libraries shown below:

  • Security
What you'll learn

When conducting a red team exercise or penetration test against a large organization, one of the most important steps is identifying domains, emails and hosts related to your target. Using a centralized framework for OSINT and enumeration can help save time during this phase. In this course, Open-Source Intelligence (OSINT) with Recon-ng, you’ll learn how to enumerate a target using various techniques. First, you’ll explore the basics of OSINT and the Recon-ng tool. Next, you’ll discover how to enumerate domains and email addresses using open-source intelligence. Finally, you’ll learn how to automate the OSINT process with scripts and create reports based on the data you gather. When you finish this course, you will have the skills and knowledge of Recon-ng needed to perform a comprehensive OSINT enumeration.

Open-Source Intelligence (OSINT) with Recon-ng
Intermediate
20m
Table of contents

About the author
Ricardo Reimao - Pluralsight course - Open-Source Intelligence (OSINT) with Recon-ng
Ricardo Reimao
69 courses 4.7 author rating 600 ratings

Ricardo is a Cybersecurity Consultant based in Toronto (Canada). He has 10+ years of IT experience, 6 of them in the IT Security field. His main interests are: SIEM solutions (IBM QRadar), Enterprise Security Risk, Penetration Testing, Security processes/procedures and Network Security.

2025 Forrester Wave™ names Pluralsight as a Leader among tech skills dev platforms

See how our offering and strategy stack up.

forrester wave report