Twitxy
Saved
@RidgebackSec's profile picture
View on X

Ridgeback InfoSec

@RidgebackSec

ridgebackinfosec.com | Owner ➡️ @cstraynor
Joined May 2022
17 Following 92 Followers 236 Posts

Latest posts 5

Ridgeback InfoSec @RidgebackSec
Cerno gets even better w/ more verification workflows mapped to Nuclei findings last week

You can contribute pentest workflows to the repo for everyone's use ➡️ github.com/ridgebackinfos…

Or maintain private custom workflows to use alongside Cerno➡️ github.com/ridgebackinfos…
Chris Traynor @cstraynor 2d
I recently added 8 new Nuclei verification workflows to Cerno, bringing the bundled set to 23. Each states what confirms a finding and what rules it out.

A scanner match is a lead, not a verdict.

Release info ➡️ github.com/ridgebackinfos…
View quoted post on X
Ridgeback InfoSec @RidgebackSec
Proof of access is not proof of detection.

After an authorized password-spray test, we recommend preserving the time window, source IP, target accounts, and expected auth events. Give defenders enough context to check whether their alerts captured the activity.
Ridgeback InfoSec @RidgebackSec
Our Auxiliary web technology fingerprinting utility supports disconnected assessment environments.

Collect component information without external enrichment requests, then use `--enrich` later to retrieve missing lifecycle and repository information without rescanning targets.
Chris Traynor @cstraynor 5d
Web technology fingerprinting doesn't have to stop when your assessment network is isolated.

The Auxiliary repo's `aux-webtech` command can collect component data offline, then enrich the saved results later without crawling the targets again.

Repo ➡️ github.com/ridgebackinfos…
View quoted post on X