k22 - Let's Rethink Enumeration - Dan Tentler

When you think "enumeration", you probably think "nmap, dns brute force, maybe shodan", right? What if I told you there's a way to get to the same ends without nearly as much scanning and touching the perimeter of the org you want info on? In this talk I'll cover some clever enumeration techniques that will tell you more about the org you're interested in, and go beyond simple host and ip discovery. We can learn a bit about who they are, how they operate, and what assumptions are safe to make about them based on the findings like "do they put stuff that isn't production ready online", and "are they posting secrets somewhere public"?