Mechanizing Methodology: Automating Attack Surface Discovery & Reconnaissance
Daniel Miessler presents strategies for mechanizing security methodologies, automating continuous asset discovery and attack surface management.
Summary
The Human Bottleneck in Attack Surface Discovery
While hundreds of specialized reconnaissance tools exist, executing a rigorous security methodology consistently across massive target domains is mentally exhausting.
Introducing Methodological Mechanization
Daniel Miessler outlines frameworks for translating human discovery heuristics and checklists into automated, modular execution pipelines.
Continuous Asset Monitoring and Differential Alerting
The author demonstrates chaining DNS enumeration, port scanning, web screenshotting, and technology fingerprinting into continuous background discovery engines.
Maximizing Security Analyst Efficiency
The presentation shares open-source tooling concepts and architectural guidance to help bug hunters and red teamers automate repetitive reconnaissance.
Related talks
Red Team Village·59 min
Ben Sadeghipour · Michael Barnes
NahamSec (Ben Sadeghipour) and Michael Barnes explore modern cloud reconnaissance techniques, discovering ephemeral cloud assets and hidden enterprise infrastructure.
Recon Village·29 min
Jeff Foley
OWASP Amass project lead Jeff Foley demonstrates advanced network mapping, asset discovery, and external attack surface enumeration.
Recon Village·31 min
Jonathan Cran
Jonathan Cran demonstrates using open-source Intrigue Core for automated external asset discovery and attack surface mapping.