Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bug Bounty 101: Top 10 Reconnaissance Tools

netlas.io | blog | #bug-bounty | #automation | #osint | #reconnaissance | #tools | #pentest

Summary

A rundown of the top reconnaissance tools for bug bounty hunters, covering asset discovery, OSINT, automation and vulnerability research, and how each fits into a typical hunting workflow.
Published
Collected

original ↗

Related coverage

blog · netlas.io
theHarvester: a Classic Open Source Intelligence Tool
A practical guide to theHarvester: the classic open-source OSINT tool for gathering emails, subdomains and hostnames, its passive and active data sources, and real-world uses.
blog · netspi.com
Collecting Contacts from zoominfo.com
NetSPI describes scraping employee contacts from zoominfo.com for OSINT use, and releases a script that converts gathered names into emails and usernames for phishing and password spraying engagements.
blog · netlas.io
Nmap Cheat Sheet: Top 10 Scan Techiques
A practical Nmap cheat sheet covering the ten most useful scan techniques — ping, SYN, UDP, version and OS detection and more — with tips on scope, timing and output options.
blog · netlas.io
Google Dorking in Cybersecurity: Techniques for OSINT & Pentesting
Introduces Google dorking for OSINT and pentesting: the most valuable search operators for exposing files and pages, practical examples, automation approaches, and alternative search tools.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
Subdomains Tools Review: a full and detailed comparison of subdomain enumeration tools
A full and detailed comparison of subdomain enumeration tools, reviewing their features and trade-offs to help bug bounty hunters pick the right utility for reconnaissance.
back