Technique · Threat modeling

Exposure verification

Confirms which weaknesses are reachable from outside: external asset discovery and targeted checks against deployed endpoints.

Sub-techniques

External asset discovery V1062.001

Enumerate domains, subdomains and exposed services.
Targeted confirmation V1062.002

Send a request that demonstrates the weakness on a test deployment.