Tradecraft Security WeeklySubscribe

OSINT and External Recon Part 1 – Host Discovery – Tradecraft Security Weekly #8

June 28, 2017

Look Mom, No Packets!

During the reconnaissance phase of a penetration test being able to discover the external assets of an organization is extremely important. It is also important to do so as stealthily as possible. Using open-source tools and techniques it is possible to enumerate an organizations external assets without sending any packets directly from your computer system to the target organization's network. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) shows you how to use Recon-NG, Datasploit, Shodan and more!.

References:

Full Show Notes

[audio src="http://traffic.libsyn.com/tswaudio/OSINT__External_Recon_Pt._1_Host_Discovery_-_Tradecraft_Security_Weekly_8_converted.mp3"]

Content

DevSecOps Scanning Challenges & Tips

Bill BrennerOctober 26, 2021

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

Content

It Should Be ‘Cybersecurity Culture Month’

Bill BrennerOctober 19, 2021

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]