I've recently stumbled upon a new term I have not heard before - "Recon testing sessions" - from what I understand these are the very first manual testing sessions of a software when one learns about the software and generate ideas for future exploratory tests.

What things to look for and note, what techniques and strategies can be used for Recon testing sessions?

  • 1
    Recon is military term for investigation. So it is same as Investigative testing. Commented Aug 2, 2017 at 16:52

2 Answers 2


Recon testing/Reconnaissance is the act of gathering preliminary data or intelligence on your target. this is the first phase of penetration testing.The data is gathered in order to better plan for your attack. Reconnaissance can be performed actively or passively.

below mentioned areas are keys of Recon testing sessions;

The ecosystem in which the software under test resides. Touchpoints to other systems. Variables (things we change or can change). Obvious vulnerabilities and potential risks.


Recon testing is the session for collecting initial data and it will help in penetration testing. It can be done manually or automated.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.