WEBVTT

00:00:01.540 --> 00:00:04.760
If you enjoyed the OWASP Amass tool, make sure to

00:00:04.760 --> 00:00:06.460
check their official documentation.

00:00:07.240 --> 00:00:09.460
There are several other features that you might like.

00:00:09.840 --> 00:00:10.430
For example,

00:00:10.440 --> 00:00:14.390
you can create custom DNS brute forcing rules so then you can

00:00:14.390 --> 00:00:16.560
increase your chances of finding useful domains.

00:00:18.140 --> 00:00:23.630
Also, you can integrate Amass with other tools, such as Maltego. In this way,

00:00:23.640 --> 00:00:27.160
all your discovered domains are fed to your favorite red team tools.

00:00:28.440 --> 00:00:30.560
Also, if you're interested in reconnaissance,

00:00:30.600 --> 00:00:33.220
there are a few other recon courses here at

00:00:33.220 --> 00:00:34.760
Pluralsight that I can recommend to you.

00:00:35.940 --> 00:00:39.290
My two favorite ones are the Technical Information Gathering with

00:00:39.290 --> 00:00:44.000
theHarvester and Reconnaissance with Sn1per. Both of them are really

00:00:44.000 --> 00:00:45.760
useful for your red team engagements.

00:00:46.940 --> 00:00:47.460
Also,

00:00:47.470 --> 00:00:49.760
if you're wondering how you can protect your company

00:00:49.770 --> 00:00:51.860
against those kind of recon attacks,

00:00:52.340 --> 00:00:56.230
my best advice to you is to audit your own company using the Amass

00:00:56.230 --> 00:00:59.750
tool and see what domains are available externally.

00:01:01.140 --> 00:01:04.569
Once you have that information, you should then ensure that none of the

00:01:04.569 --> 00:01:07.350
internal sensitive domains are exposed to the internet.

00:01:08.040 --> 00:01:11.680
You can even work with your network team to ensure that people can only

00:01:11.680 --> 00:01:14.360
reach servers that are intended to be externally available.

00:01:16.540 --> 00:01:17.370
So that's it.

00:01:17.380 --> 00:01:21.160
That's the end of our OWASP Amass course. I hope that now you have

00:01:21.160 --> 00:01:24.160
one more useful tool in your cybersecurity toolbox.

00:01:24.840 --> 00:01:27.450
So, thank you for watching, and I'll see you in the next course.