Awesome Reviewers

Verification · Threat modeling

Exposure verification

Confirms which weaknesses are reachable from outside: external asset discovery and targeted checks against deployed endpoints.

Sub-techniques

  • External asset discovery V1062.001

    Enumerate domains, subdomains and exposed services.

  • Targeted confirmation V1062.002

    Send a request that demonstrates the weakness on a test deployment.

How to build it

  1. Discover assets on a schedule.
  2. Map findings to exposed assets.
  3. Confirm with targeted templates against non-production environments.

Signals in a repository

  • Scheduled scan workflows and nuclei templates.