About this ebook
This book presents a practical approach to reconnaissance, enumeration, and attack surface mapping using Kali Linux as the analysis platform. Designed for cybersecurity students and professionals, the content covers asset discovery, DNS, subdomains, TLS certificates, IP infrastructure, ports, services, web applications, APIs, cloud, and corporate environments, always within authorized contexts.
The book explores widely used recon tools such as Nmap, Masscan, Naabu, Subfinder, Amass, dnsx, httpx, and Katana, as well as OpenSSL, curl, jq, Bash, and Python. It also covers Certificate Transparency, RDAP, WHOIS, ASN, BGP, virtual hosts, service fingerprinting, crawling, JavaScript, containers, Docker, Kubernetes, DevOps, pipeline automation, JSON, JSONL, data correlation, Asset Graph, and continuous reconnaissance.
You will learn to:
*Define scope and organize the target universe * Enumerate subdomains and validate DNS records * Use Certificate Transparency and TLS certificates for asset discovery * Map IP infrastructure with RDAP, WHOIS, ASN, and BGP * Discover hosts and ports with Nmap, Masscan, and Naabu * Identify services, technologies, virtual hosts, and web applications * Map endpoints, JavaScript, and APIs with httpx and Katana * Recognize cloud resources, identity, containers, and Kubernetes * Automate collections with Bash, Python, jq, JSON, and JSONL * Correlate results and build an Asset Graph * Compare baselines and identify changes in the attack surface
The content organizes the techniques into a sequence that begins with discovery and advances through validation, fingerprinting, automation, and correlation. The objective is to serve as study and reference material for those seeking to improve their knowledge of reconnaissance, information gathering, and attack surface mapping with Kali Linux.
kali linux, reconnaissance, information gathering, attack surface mapping, subdomain enumeration, dns reconnaissance, certificate transparency, tls fingerprinting, rdap, whois, asn, bgp, nmap, masscan, naabu, subfinder, amass, dnsx, httpx, katana, openssl, curl, jq, bash, python, jsonl, port scanning, service fingerprinting, virtual hosts, api reconnaissance, cloud reconnaissance, docker, kubernetes, devops, asset graph, recon automation, osint, pentest, red team, cybersecurity
Discover more
About the author
Diego Rodrigues
Technical Author and Independent Researcher
ORCID: https://orcid.org/0009-0006-
StudioD21 Smart Tech Content & Intell Systems
Email: studiod21portoalegre@gmail.com
LinkedIn: linkedin.com/in/diegoexpertai
International technical author (tech writer) focused on the structured production of applied knowledge. He is the founder of StudioD21 Smart Tech Content & Intell Systems, where he leads the creation of intelligent frameworks and the publication of didactic technical books supported by artificial intelligence, such as the Kali Linux Extreme series, SMARTBOOKS D21, among others.
Holder of 48 international certifications issued by institutions such as IBM, Google, Microsoft, AWS, Cisco, META, Ec-Council, Palo Alto, and Boston University, he works in the fields of Artificial Intelligence, Machine Learning, Data Science, Big Data, Blockchain, Connectivity Technologies, Ethical Hacking, and Threat Intelligence.
Since 2003, he has developed more than 200 technical projects for brands in Brazil, the USA, and Mexico. In 2024, he established himself as one of the leading technical book authors of the new generation, with over 180 titles published in six languages. His work is based on his proprietary TECHWRITE 2.3 applied technical writing protocol, focused on scalability, conceptual precision, and practical applicability in professional environments.
