27:16
Internet-Wide Recon: Moving Past IP-Centric Approaches
45:18
Beyond Shadow IT: Understanding the True Attack Surface of Your Software
48:51
The Art of Recon: Strategies for Modern Asset Discovery
37:59
The Unknown Complexities of DNS Resolution
47:30
Confusion in the Attack Surface Management Market - Surfacing Security Ep 6
41:03
Uncovering Critical Vulnerabilities in Magento: A Deep Dive - Surfacing Security Ep 5
52:46
What is "True" Attack Surface Management (ASM)? - Surfacing Security Ep 4
57:18
The Untold Story of Assetnote: Origins and Evolution - Surfacing Security Ep 3
39:43
A Deep Dive into Three ServiceNow Vulnerabilities (with Adam Kues) - Surfacing Security Ep 2
29:41
Chaining Three Bugs to Access All Your ServiceNow Data (Live Q&A) - Surfacing Security Ep 1
07:13
Bug Bounty Redacted #5: Second Order Subdomain Takeovers & Logic Bug DoS
07:55
Bug Bounty Redacted #4: Writing to S3 buckets & Insecure JWT Implementation
10:16
Bug Bounty Redacted #3: Hacking APIs & XSS, SQLi, WAF Bypass in a regional web application
09:30
Bug Bounty Redacted #2: Third Party Subdomain Takeover & Exposed Admin Interfaces
06:17
Bug Bounty Redacted #1: Exposed Redis and HAProxy
X
About
Assetnote continually monitors your external attack surface as it evolves allowing you to identify and triage high impact security issues quickly. Our team at Assetnote have been participating in bug bounties and have been application security enthusiasts for just under ten years, and we aim to share the knowledge we have obtained over the years through this channel.
Tags