Upgrade to Pro — share decks privately, control downloads, hide ads and more …

EASM mistakes waiting to happen

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for JR0ch17 JR0ch17
January 25, 2022
Technology
62
0

EASM mistakes waiting to happen

Avatar for JR0ch17

JR0ch17

January 25, 2022

More Decks by JR0ch17

See All by JR0ch17
Traversing my way in the internal network
Avatar for JR0ch17 jr0ch17
0
190
Getting Started in Bug Bounty
Avatar for JR0ch17 jr0ch17
0
180
Getting Blindly Lucky
Avatar for JR0ch17 jr0ch17
0
110
Qu'est-ce que le bug bounty?
Avatar for JR0ch17 jr0ch17
0
170
Finding 5 bugs in a single parameter
Avatar for JR0ch17 jr0ch17
0
130
Beyond the Borders of Scope
Avatar for JR0ch17 jr0ch17
1
110
Bad API, hAPI Hackers!
Avatar for JR0ch17 jr0ch17
0
1.6k

Other Decks in Technology

See All in Technology
AIが自社のTableauを操作する世界へ：Tableau MCP超入門
Avatar for Yukako Tabata tbtykk
0
110
Contract One Engineering Unit 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
0
19k
[MIRU26] To What Extent Does MLLM-as-a-Judge Exhibit Cross-Model Preference Bias?
Avatar for Semantic Machine Intelligence Lab., Keio Univ. keio_smilab
PRO
0
200
Goでデータパイプラインを作ろう
Avatar for SansanTech sansantech
PRO
0
240
plamo-3-translateの開発
Avatar for Preferred Networks pfn
PRO
0
280
AIエージェントを前提としたプラットフォーム エンジニアリング：GKEで作るAgent-Ready Golden Path
Avatar for LegalOn Technologies, Inc legalontechnologies
PRO
1
160
ブラウザ研修 2026
Avatar for Recruit recruitengineers
PRO
3
460
Sansan Engineering Unit 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
1
4.9k
OSPN.JPバージョンアップ作業進捗のご報告 / 20260801-osc26kyoto
Avatar for Akira Ouchi akkiesoft
0
260
ウォーターフォール開発案件のPMとしてAI活用を模索している話
Avatar for da-hatakeyama hatahata021
3
310
AWS ネットワーク構築でハマった（ハマりかけた） 5選とそこから得た教訓
Avatar for nagisa_53 nagisa53
4
180
LLMリーダーボードアップデートに向けたAgentic Math_SWEのトレースについて
Avatar for YuyaYAMAMOTO nejumi
0
210

Featured

See All Featured
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
6k
Designing for humans not robots
Avatar for Tammie Lister tammielis
254
26k
Designing for Performance
Avatar for Lara Hogan lara
611
70k
Writing Fast Ruby
Avatar for Erik Berlin sferik
630
63k
Designing for Timeless Needs
Avatar for Cassini Nazir cassininazir
1
430
Are puppies a ranking factor?
Avatar for Jono Alderson jonoalderson
1
3.8k
Raft: Consensus for Rubyists
Avatar for Patrick Van Stee vanstee
141
7.6k
Paper Plane (Part 1)
Avatar for Katie Cordina Lindsey katiecoart
PRO
1
10k
Design in an AI World
Avatar for tapps tapps
1
270
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
11k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
348
40k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
12k

Transcript

  1. EASM mistakes waiting to happen

  2. GET /whoami HTTP/2 Jasmin Landry JR0ch17 Lead, IT & Security

    at Montreal Canadiens fan

  3. GET /agenda HTTP/2 EASM Common mistakes Hacker perspective

  4. GET /EASM HTTP/2 What exactly is EASM? What does it

    cover? Why is it important?

  5. GET /common_mistakes HTTP/2 Lack of Change Management Not respecting Least

    Privilege Misconfigured WAFs Cloud misconfigs (S3 buckets)

  6. GET /hacker_perspective HTTP/2 • Subdomains • IPs • TLS certificates

    • Third-party apps Recon EVERYTHING • Monitor for new assets • Monitor any change Continuous Monitoring

  7. GET /thanks HTTP/2 Thank you for listening Questions? More questions?

    DMs are open on and