Abstract: This talk discusses and demonstrates some interesting, latest reconnaissance techniques. The overall theme of this talk is to cover reconnaissance techniques that are relevant for today’s security assessments. We’ll delve deep into how these recon techniques work, why they are effective and tooling around them. The rough outline of the talk is as following: What is reconnaissance? What are the main themes/aspects of a reconnaissance phase? Common reconnaissance techniques Emerging trends in reconnaissance Certificate Transparency as a recon technique DNSSEC zone walking for reconnaissance Reconnaissance in the age of APIs/DevOps Code repositories as a treasure trove of information Problems with the way reconnaissance is conducted Passive recon using public datasets Doing reconnaissance at a scale