OSINT

Open-source reconnaissance — subdomain enumeration, metadata extraction, social footprinting, and passive recon techniques.