Definition
Footprinting is the process of gathering information about a target system or network to understand its structure, vulnerabilities, and potential attack vectors. This reconnaissance phase involves actively or passively collecting data from various sources like public records, network scanning tools, and social engineering techniques. Understanding footprinting is crucial for both offensive security professionals to plan attacks and defensive teams to identify potential weaknesses in their own infrastructure. For instance, a penetration tester might use tools like Nmap to discover open ports and running services on a target server. This differs from active scanning, which directly probes the target, as footprinting can also involve passive observation of publicly available information. This concept is fundamental in cybersecurity domains such as CompTIA Security+ and CySA+.