PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Recon Series #6: Excavating hidden artifacts with Wayback Machine and other web-archive tools

yeswehack.com | blog | #bug-bounty | #osint | #recon | #wayback-machine | #web-archives | #passive-recon
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recon series #6 explains archive-based reconnaissance with Wayback Machine, CommonCrawl, Archive.today and URLScan to recover deprecated endpoints, embedded secrets and forgotten admin panels.
Published
Collected

Related coverage

blog · yeswehack.com
Recon series #5: A hacker’s guide to Google dorking
Beginner-friendly guide to Google dorking: core operators such as site:, inurl: and filetype:, plus hands-on queries for subdomain discovery, hidden files, login portals and exposed credentials.
blog · netspi.com
NetblockTool: The Easy Way to Find IP Addresses Owned by a Company
NetblockTool is a Python tool that automates netblock discovery, scraping Google dorks, ARIN, and IPinfo to build a confidence-ranked list of IP ranges owned by a company and its subsidiaries.
blog · netspi.com
Analyzing DNS TXT Records to Fingerprint Online Service Providers
Analyzes leftover domain-validation TXT records across a million domains to fingerprint the online service providers a company uses, releasing a PowerShell script to automate the reconnaissance.
blog · netspi.com
Anonymously Enumerating Azure Services
Karl Fosaaen releases a script for anonymous Azure service enumeration, brute forcing DNS across azurewebsites.net, cloudapp.net, and blob.core.windows.net to map a target's public Azure footprint.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
Recon series #4: Port scanning – uncovering attack vectors by revealing open ports and hidden services
Recon series #4 on port scanning: passive scans via Shodan and Censys, active TCP/UDP techniques, banner grabbing, firewall evasion, and tools including Nmap, Masscan, Naabu and httpx.
Back