A Pentester's Guide - Part 1 (OSINT - Passive Recon and Discovery of Assets)
To kick off this series on offensive security techniques, I am going to begin with what I consider to be the most important aspects of pentesting. Passive Recon and OSINT. Now, do not let the word ‘passive’ fool you. This is no light recon; you can uncover vast amounts of information through passive recon, without ever doing anything intrusive. Define Passive My definition of the word "passive" is
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - mathis2001/Showldan: Recon tool using shodan API to automate shodan information gathering process and find juicy stuff during bug hunting.
GitHub - Ractiurd/argus
GitHub - Ignitetechnologies/Mindmap: This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them
Elasticsearch A Easy Win For Bug Bounty Hunters || How To Find and Report
GitHub - 0xPugal/Awesome-Dorks: Dorks for Bug Bounty Hunting
GitHub - projectdiscovery/uncover: Quickly discover exposed hosts on the internet using multiple search engines.
Sam Erb - Hunting Certificates and Servers - DEF CON 27 Packet Hacking Village
Recon & Discovery
BUG BOUNTY - RECON with SHIVANG TRIVEDI | SUBDOMAIN TAKEOVER SHODAN LOGIN BYPASS | ZERO DAY EP 03
Hassan Saad
GitHub - k4r4koyun/soilgaze: Soilgaze is a simple Go application that recovers intel from OSINT sources such as Shodan, Binaryedge and Censys.
GitHub - shadowscatcher/shodan: yet another Shodan.io client
GitHub - KingOfBugbounty/KingOfBugBountyTips: Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influen
Weaponizing favicon.ico for BugBounties , OSINT and what not
It's the Little Things (Part 2) Final - Public
Passive Reconnaissance - Security Sift
Gathering Open Source Intelligence
OSINT | hackers-arise