> For the complete documentation index, see [llms.txt](https://notes.ubg-hacking.team/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.ubg-hacking.team/attacks/reconnaissance.md).

# Reconnaissance

- [C99 Recon](https://notes.ubg-hacking.team/attacks/reconnaissance/c99-recon.md)
- [DNS](https://notes.ubg-hacking.team/attacks/reconnaissance/dns.md)
- [SubDomain lookup](https://notes.ubg-hacking.team/attacks/reconnaissance/dns/subdomain-lookup.md)
- [Tools/Syntax](https://notes.ubg-hacking.team/attacks/reconnaissance/tools-syntax.md): todo
- [O365 RealmInfo](https://notes.ubg-hacking.team/attacks/reconnaissance/o365-realminfo.md)