Spyse – A Cyber Security Search Engine

guest · Jun 15, 2020

Spyse – A Cyber Security Search Engine
June 15, 2020
https://pentestlab.blog/2020/06/15/spyse-a-cyber-security-search-engine/

Spyse is a search engine which can be used to identify internet assets and perform external reconnaissance easily. Results are delivered fast. Pentestlab has recently performed a review of the product and the results are presented in this article.

Subdomains of a particular domain can be easily discovered to aid in the process of asset discovery. Penetration testers and red teamers should be able to use it during Open Source Intelligence Assessments or while examining the external attack surface of their client. A records, DNS CNAME and version of TLS/SSL are also returned into the results. Since TLS and SSL are affected by a number of vulnerabilities it could be used as an initial step prior to any other tool.

Spyse also performs web spidering on the target domain therefore information such as the links, robots.txt files and HTTP headers can also retrieved.
Click to expand...

Vulnerabilities
Spyse can also perform vulnerability discovery by identifying open ports and matching the port discovery with a CVE (Common Vulnerabilities & Exposures) number.
Conclusion
Passive reconnaissance it is the first step on every red team engagement or external security assessment. Spyse has the ability to return data back to the user very fast and with efficiency by performing a semi-automatic information gathering.
Click to expand...

Log in or Sign up

Spyse – A Cyber Security Search Engine

guest Guest

Log in or Sign up

Spyse – A Cyber Security Search Engine

guest Guest

Useful Searches