📂 02 - ATT&CK Reconnaissance
Overview
MITRE ATT&CK: Reconnaissance (TA0043) — the adversary is trying to gather information they can use to plan future operations.
External, pre-access information gathering: port/service scanning, directory and parameter fuzzing, DNS lookups, subdomain discovery, schema introspection — everything done before having a foothold on the target.
🧠 Techniques
| File | Created |
|---|---|
| Docker White-box Challenge Enumeration | Thursday, February 26th 2026, 3:38:39 pm |
| GraphQL - Introspection Exploitation | May 21, 2026 |
| JavaScript - Deobfuscation | August 10, 2026 |
| Kubernetes - Kubelet API Anonymous Access | July 27, 2026 |
| NFS - Anonymous Share Mounting | September 07, 2026 |
📦 Tech Stack
| File | Created |
|---|---|
| Dovecot | September 07, 2026 |
| GraphQL | May 06, 2026 |
| NFS | September 07, 2026 |
| Roundcube | September 07, 2026 |
🛠️ Tools
| File | Created |
|---|---|
| (incomplete) BurpSuite | May 21, 2026 |
| (incomplete) Dig | May 21, 2026 |
| FFUF | Tuesday, February 10th 2026, 10:58:13 pm |
| Gobuster | Tuesday, February 10th 2026, 10:58:13 pm |
| NetExec | July 20, 2026 |
| Nmap | Tuesday, February 10th 2026, 10:58:13 pm |