Tradecraft Security WeeklySubscribe

OSINT and External Recon Part 1 – Host Discovery – Tradecraft Security Weekly #8

June 28, 2017

Look Mom, No Packets!

During the reconnaissance phase of a penetration test being able to discover the external assets of an organization is extremely important. It is also important to do so as stealthily as possible. Using open-source tools and techniques it is possible to enumerate an organizations external assets without sending any packets directly from your computer system to the target organization's network. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) shows you how to use Recon-NG, Datasploit, Shodan and more!.

References:

Full Show Notes

[audio src="http://traffic.libsyn.com/tswaudio/OSINT__External_Recon_Pt._1_Host_Discovery_-_Tradecraft_Security_Weekly_8_converted.mp3"]

A young woman with a smartphone walks past a billboard advertisement for YouTube.

Threat Management

Majority of YouTube accounts Google terminated in Q3 linked to China

Steve ZurierAugust 29, 2022

While some of the 1,546 YouTube channels terminated by Google emanated from Russia, the vast majority blocked were linked to China.

Content

DevSecOps Scanning Challenges & Tips

Bill BrennerOctober 26, 2021

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

Content

It Should Be ‘Cybersecurity Culture Month’

Bill BrennerOctober 19, 2021

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news