NetblockTool: The Easy Way to Find IP Addresses Owned by a Company

AutoDirbuster wraps OWASP DirBuster in Python to run directory brute-forcing across multiple IP:port targets automatically, accepting Nmap gnmap files and saving per-target reports.

Analyzes leftover domain-validation TXT records across a million domains to fingerprint the online service providers a company uses, releasing a PowerShell script to automate the reconnaissance.

Karl Fosaaen releases a script for anonymous Azure service enumeration, brute forcing DNS across azurewebsites.net, cloudapp.net, and blob.core.windows.net to map a target's public Azure footprint.

A social engineering engagement posed as a journalist seeking comment on an anonymous tip about hazardous waste dumping, showing how OSINT-grounded pretexts lower well-trained executives' guard.

Part 3 of the red teaming series: joint red/blue debriefs, blameless post-mortems, and shared processes turn exercise findings into lasting security improvements.

NetSPI's DEF CON 33 talk shows how Azure resources supporting Entra ID authentication expose tenant IDs, letting attackers map cloud resources back to specific organizations at scale.