DEF CON 32 - Efficient Bug Bounty Automation Techniques - Gunnar Andrews

[@xscorp382]

That dnsdist sounds promising. Thanks for the info. I too have my automations in place. I am yet to see the community contributed and trusted resolvers fail as I have never caught them lacking. There is one part I disagree with - Port scanning. While smap is great and lists ports found for a specific IP, The list is not exhaustive as port scanning is only performed on top few ports. You will anyway have to run port scanning regardless of the results brought by smap for effective asset discovery. btw good talk Gunnar, Really appreaciate it!

[@4b978]

This guy is amazing, thank you!

[@modawi5]

great, can you give like the example for using subfinder with flag that you said

[@storm4246]

Great talk!

[@businessarchives]

Can we have his GitHub?