Open Source Intelligence Gathering 201 (Covering 12 additional techniques)
This post is the second in a series of technical posts we are writing about Open Source Intelligence(OSINT) gathering. We highly recommend that you follow the series in a sequence. Open Source Intelligence Gathering 101You are reading thisMore to comeThere is various kinds of data that can be categorised as OSINT data but all of this data is not of significance from a penetration tester point of v
Static Analysis of Client-Side JavaScript for pen testers and bug bounty hunters
JavaScript has become one of the most ubiquitous technologies in the modern web browsers. Applications built using client-side JavaScript frameworks such as AngularJS, ReactJS and Vue.js push a lot of functionality and logic to the front-end. With the increased functionality/logic on the client-side, the attack surface on the client-side also increases. As a security tester it is essential for us
open-source-intelligence-gathering-101-d2861d4429e3
A Penetration Test almost always needs to begin with an extensive Information Gathering phase. This post talks about how Open Sources of information on the Internet can be used to build a profile of the target. The gathered data can be used to identify servers, domains, version numbers, vulnerabilities, mis-configurations, exploitable endpoints and sensitive information leakages. Read on! There is
A penetration tester’s guide to subdomain enumeration
As a penetration tester or a bug bounty hunter, most of the times you are given a single domain or a set of domains when you start a security assessment. You’ll have to perform extensive reconnaissance to find interesting assets like servers, web applications, domains that belong to the target organisation so that you can increase your chances of finding vulnerabilities. We wrote an extensive blog
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
