Downloaded 50 times
Uploaded byChema Alonso
Dorking & Pentesting with Tacyt
The document discusses 'dorking' and pentesting, emphasizing the focus on code rather than individuals. It introduces 'tacyt' and outlines various methods and tools for uncovering vulnerabilities in applications, including password lists, third-party credentials, and common injection attacks. The author, Chema Alonso, invites questions and credits Eleven Paths for the development of the tacyt service.
More Related Content
Dorking & Pentesting with Tacyt
- 1. Dorking & Pentesting! withTacyt Chema Alonso @chemaalonso
- 2.
- 3. The target isthe! “What” not the “Who”
- 4. The Target isthe Code
- 5.
- 6. Dorking with apps:! code& metadata
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17. 3.- Third PartyCredentials
- 18.
- 19.
- 20. API Keys &Tokens
- 21. 4.- Bugs toget into • SQL.asp/php/aspx/… • Query • ldapsearch • exec • sql • command • …
- 22.
- 23.
- 24.
- 25.
- 26.
- 27. Questions? • Chema Alonso – http://twitter.com/chemaalonso – chema@11paths.com – http://www.elladodelmal.com • Disclaimer: Tacyt Service has been developed by Eleven Paths. All things working well are because of their hard work. All things *may* went bad on this talk were my fault.