Security enthusiast
I like clicking buttons and seeing what happens
Bash one-liner fanatic
regex masochist
Contact me if you need any help (on twitter) :) 🏳️🌈
(she/her)
| Medium | https://medium.com/@nynan |
| funny bird app (twitter dot com) | https://twitter.com/_nynan |
Automated and Continuous Recon/Attack Surface Management - Amass Track and DB
@nyxilar and I spent 6~ months applying classic #bugbounty techniques to correlate 42k *root* domains, deanonymise and track a new threat actor: Fangxiao.
We're excited to give a talk about this at @BSidesLondon
.
Read the white paper at @Cyjax_Ltd
.
Phishing campaigns continue to increase globally. These operations offer an easy route for cybercriminals to generate revenue, steal credentials and spread malware. Cyjax has recently investigated a sophisticated, large-scale phishing campaign that exploits the reputation of international, trusted brands, and targets businesses in multiple verticals including retail, banking, travel, pharmaceuticals, travel and energy. We are … Continued
What I learnt from reading 217* Subdomain Takeover bug reports.
https://medium.com/p/what-i-learnt-from-reading-217-subdomain-takeover-bug-reports-c0b94eda4366
How to **actually** use Amass more effectively — Bug Bounty
https://medium.com/p/how-to-actually-use-amass-more-effectively-bug-bounty-59e83900de02
Bug Bounty Recon: Horizontal Correlation (Dec 21, 2021)
https://medium.com/p/bug-bounty-recon-horizontal-correlation-b7c81a32951a
emily 
