The Dangers of Building a Recursive Internet Scanner by Joel Moore | BSides CHS 2024 скачать в хорошем качестве

The Dangers of Building a Recursive Internet Scanner by Joel Moore | BSides CHS 2024

Recursion is a Harsh Mistress: The Dangers of Building a Recursive Internet Scanner by Joel Moore In this engaging talk, cybersecurity expert Joel Moore (TheTechromancer) dives into the complexities of building a recursive internet scanner, BeeBot, for discovering hidden vulnerabilities across massive networks. He shares insights into recursive scanning—an approach that can reveal subdomains and attack surfaces overlooked by traditional tools but comes with unique and challenging bugs that often result in unintended consequences. Key Topics: • What is Recursive Scanning? Learn how recursion uncovers hidden vulnerabilities and why it can be a double-edged sword in cybersecurity. • Challenges & Bugs: From endless loops to DNS wildcards and cloud misconfigurations, explore the unexpected pitfalls encountered during BeeBot’s development. • Power of Recursive Tools: Discover how recursive scanners like BeeBot provide a competitive edge for red teamers, blue teamers, and threat intelligence professionals. • Open-Source Tool: BeeBot is open-source, making it accessible to the cybersecurity community for OSINT and external attack surface management. Perfect for cybersecurity professionals, this talk offers valuable lessons in handling recursion safely and effectively. Whether you’re working on bug bounties or defending large networks, Joel’s journey with BeeBot provides insights into navigating the complexities of recursive scanning.