Reconnaissance is the process of gathering information about targets through passive and active techniques, often as the first phase of an assessment. This category includes subdomain enumeration, asset discovery, ASN/IP lookups, crawling, and other data-gathering tools used across bug bounty hunting, red teaming, and pentesting.
