Reconciling external attack surface findings with what you already own
Matching external findings against the inventory, the four buckets that fall out of the comparison, and why ownership assignment is the deliverable.
Tag archive
Matching external findings against the inventory, the four buckets that fall out of the comparison, and why ownership assignment is the deliverable.
I wanted to understand what a careful, low-impact reconnaissance process looks like before any deeper...

Every time you detect the technologies behind a website, you're fingerprinting. Not all...
Before a single packet reaches your WAF, an attacker already knows your Node.js version, your CDN,...

Before a security team tests a system, it has to know what it's dealing with. Which frameworks run?...
Introduction On July 9, 2023, an unsupervised AI agent, Hermes, was detected conducting...
Datadog security researchers say overlapping months-long campaigns have been abusing GitHub's public API and reactivating more than 50 long-dormant accounts to map organizations and their engineers. The setup looks a lot like the reconnaissance phase of a supply-chain intrusion.
Découvrez comment l'OCR et la reconnaissance automatique de factures réduisent la saisie manuelle et font gagner du temps en comptabilité.
Découvrez comment l'OCR et la reconnaissance automatique de factures réduisent la saisie manuelle et font gagner du temps aux services comptables.

Most beginners think reconnaissance starts with port scanning. It doesn't. In fact, some of the...

Imagine if every time someone built a new house, they were required to register it in a public record...

1. Introduction: The Importance of Reconnaissance A penetration tester must respond to the...