Overview

Modern organizations often have hundreds to thousands of external assets exposed on the internet. Discovering and mapping these assets is essential. If you are a bug hunter, penetration tester, or red teamer, these assets may be vulnerable, allowing trivial and undetected access to a target’s environment. Likewise, if you are responsible for defending these assets, these assets need to be cataloged, hardened, and configured with alerts. 

Asset management and discovery is a difficult problem to solve. Organizations often grow organically through acquisitions or partnerships. In some organizations, developers are given the freedom to deploy assets externally using cloud solutions like AWS. There exist several tools to discover external assets for organizations but Amass is considered the industry-standard tool for asset discovery. In this course, we will cover how to install, configure, and use Amass to identify and discover external assets.  

By the end of the course, you will be able to attack or protect an organization’s assets and have the beginnings of an automated scanning pipeline created.