【Bugcrowd】Practical recon techniques for bug hunters & pentesters

正文

PPT
https://speakerdeck.com/yamakira/practical-recon-techniques-for-bug-hunters-and-pentesters

LevelUp 0x02 – Practical recon techniques for bug hunters & pen testers
[https://www.youtube.com/watch?v=McLdm4c1oLs]

Recon— my way.
https://medium.com/ehsahil/recon-my-way-82b7e5f62e21

Web应用安全测试前期情报收集方法与工具的介绍
https://www.freebuf.com/sectool/174417.html

笔记

Virustotal Passive DNS 脚本
https://github.com/appsecco/the-art-of-subdomain-enumeration/blob/master/virustotal_subdomain_enum.py

python virustotal_subdomain_enum.py <domain> <number>
python virustotal_subdomain_enum.py qq.com 10

• #Bug Bounty
• #OSINT
• #Recon
• #信息收集