training
Practical Offensive Recon for Modern Attack Surfaces
- Host
- c0c0n 2026
- Location
- Grand Hyatt, Bolgatty, Kochi, Kerala, India
- Audience
- Penetration Testers, Red Teamers, Security Researchers, Bug Bounty Hunters, ASM/CTEM Teams, Threat Intelligence Analysts, Security Engineers
- Duration
- 3 days
Delivered the three-day in-person edition of RedHunt Labs’ offensive recon training at c0c0n 2026, 6-8 October at Grand Hyatt, Kochi.
The course is attacker-grade reconnaissance for organizations whose footprint now runs past domains and IPs into cloud, SaaS, APIs, mobile, third-party services, and AI platforms. The room worked through hands-on labs against real-world targets and enterprise-scale datasets, mixing manual tradecraft with automation and AI-assisted workflows.
The three days were structured as:
- Day 1: Mapping the modern external attack surface. Methodology, domain and infrastructure discovery, DNS, certificate, ASN, and historical intelligence, fingerprinting, and an initial attack-surface map.
- Day 2: Hidden enterprise exposures. Cloud across AWS, Azure, and GCP, APIs, SaaS and shadow IT, source code, CI/CD, container registries, and leaked secrets and configuration.
- Day 3: Chaining exposures into attack paths. Entry points, credential and authentication weaknesses, cloud and API abuse, supply-chain and AI exposures, and a capstone against a simulated organization starting from almost nothing.
