Exercise 2: How Shallow Recon Damages Every Later Phase — Possible Solution ==================================================================== THE GENERAL PRINCIPLE ------------------------------ Per this chapter, "a shallow recon phase doesn't just produce a smaller result on its own — it produces a shallow, incomplete attack surface map that every later phase inherits without ever knowing what was missed." The key phrase is "without ever knowing what was missed" — later phases have no way to tell the difference between "this doesn't exist" and "recon simply never found it." IMPACT ON PENTEST1-5 (SCANNING & ENUMERATION) ------------------------------ Per this chapter, "pentest1-5's scanning depends on already knowing what to scan — the IP ranges and subdomains this phase discovers." If recon missed a subdomain or an IP range genuinely belonging to the target, that system is never scanned at all, and the entire scanning phase silently proceeds as if it doesn't exist, rather than flagging it as a known gap. IMPACT ON PENTEST1-6 (VULNERABILITY ANALYSIS) ------------------------------ Per this chapter, "pentest1-6's vulnerability analysis depends on knowing what's actually running, using the technology-stack clues this phase surfaces." If recon failed to surface a job posting or a DNS/TXT record revealing a specific technology in use, vulnerability analysis has no basis to even consider vulnerability classes specific to that technology — the gap propagates forward as a blind spot, not a flagged unknown. IMPACT ON PENTEST1-7 (EXPLOITATION) ------------------------------ Per this chapter, "pentest1-7's exploitation sometimes depends directly on valid targets or credentials this phase turns up." If a breach-database check during recon was skipped or incomplete, a set of real, reusable credentials might never be discovered, and exploitation proceeds without ever knowing that avenue existed at all — not because it was ruled out, but because it was never looked for. WHY THIS WORKS AS AN ANSWER ------------------------------ It connects the chapter's own general "inherited blind spot" principle to each of the three specific downstream chapters by name, using the chapter's own stated dependency for each one, rather than a vague claim that "later phases will just be worse."