Abstract:
A run-down of (mostly) passive reconnaissance techniques; some well-known, some not-so-well-known. We'll look at Google Dorking, scanning GitHub profiles for dotfiles, building website maps with Archive.org, and introduce breadth-first scanning to avoid detection.

Speaker Bio:

TomNomNom is a software engineer from Bradford. He likes to fix things, explain things, write code, and dabble in bug bounties.