Mechanizing the Methodology: by Daniel Miessler
HTML-код
- Опубликовано: 30 ноя 2024
- Mechanizing the Methodology : Automating Discovery, Testing, and Alerting using Recon/Testing Tools and Amazon SES
Daniel Miessler is a recognized cybersecurity expert and writer with 20 years in Information Security. His experience ranges from technical assessment and implementation, to executive level advisory services consulting, to building and running industry-leading security programs. His 20 years of experience in security ranges from the vibrant startup ecosystem in his birthplace of Silicon Valley, to working with many of the top 100 worldwide companies. He frequently gives talks and participates in panels around the world, and his work and commentary have been featured in dozens of the world’s leading publications.
Abstract: There are a million techniques out there for finding new attack surface and finding potential vulnerabilities; the problem is finding the time to run your entire methodology against all your targets. This talk will take you through finding new attack surface, performing multiple types of test against those targets, and sending real-time alerts---all on a continuous basis using automation from a cloud-based Linux host.
01:11 turning everything into questions 03:43 find live hosts 04:15 module philosophy 05:45 get a page's html 06:46 getting the domains that redirect to a domain 08:14 getting ranges from an ASN, amass 09:13 module chains [range] 11:52 notify you, email, slack, amazon ses 12:33 collect, maintain, deploy, terraform, ansible, github
my takeaway from this: "With an automation stack you can convert your knowledge and your learnings into something tangible and repeatable".
Oh how wonderful it'll be to apply this to all cool new things we come across in our lives -- not just tech.
wow i like the idea of lots of smaller scripts it makes so much sense. i used to just slap everything in one script and run the thing and always takes forever
I love your content, I have started in this beautiful world of content on RUclips, I am new to this and here we go with issues of cybersecurity and ethical hacking
Such an incredible talk. Awesomeness being made simple.
Awesome stuff. Thank you so much ❤️
Amazing
someone mentioned me here in comments, thats why i am here.
Awesome
..
Binod
Great
1337!