Knock Knock: Identifying Cloud Assets & Hidden Attack Surfaces
NahamSec (Ben Sadeghipour) and Michael Barnes explore modern cloud reconnaissance techniques, discovering ephemeral cloud assets and hidden enterprise infrastructure.
Summary
The Fast-Paced Race of Asset Discovery
In bug bounty hunting and red team engagements, discovering newly deployed cloud assets before others is critical to finding unpatched vulnerabilities.
Techniques for Cloud Asset Identification
Ben Sadeghipour (NahamSec) and Michael Barnes share proven methodologies for resolving cloud IP ranges, TLS certificate transparency logs, and DNS records.
Automating Cloud Surface Mapping
The speakers demonstrate writing lightweight enumeration scripts to continuously discover exposed web services, APIs, and administrative portals across AWS, Azure, and GCP.
Operational Workflows for Bug Hunters and Red Teams
The presentation provides actionable tips for prioritizing targets and avoiding common reconnaissance pitfalls.
Related talks
Red Team Village·20 min
Daniel Miessler
Daniel Miessler presents strategies for mechanizing security methodologies, automating continuous asset discovery and attack surface management.
Recon Village·31 min
Jonathan Cran
Jonathan Cran demonstrates using open-source Intrigue Core for automated external asset discovery and attack surface mapping.
Village Interviews·< 1 min
A walkthrough of Recon Village at DEF CON 31 exploring open-source intelligence methodologies, attack surface discovery, and recon CTF challenges.