SECRETS AND SHADOWS: LEVERAGING BIG DATA FOR VULNERABILITY DISCOVERY AT SCALE

Summary from the TLDR InfoSec newsletter

Bill Demirkapi's long term project discovered over 66,000 unique TLDs with dangling records and more than 15,000 verified secrets. He used innovative methods including enumerating cloud IP pools, utilizing passive DNS sources, and employing VirusTotal's Retrohunt tool with custom YARA rules. In this post Demirkapi outlines the key principles for large-scale vulnerability discovery, emphasizing starting with the vulnerability itself and using creative data sources with relevant relationships.