NETLAS BLOG
Blog Posts
Guides, in-depth features overview & case studies.
Using TLDFinder with Netlas
Developed by Project Discovery, TLDFinder is a potent tool that lets users find top-level domains (TLDs) and related subdomains. This guide provides a step-by-step tutorial on setting up TLDFinder on Ubuntu, configuring it with Netlas, and effectively using it for domain discovery and attack surface analysis.
- Vyacheslav Makhrov
December 23, 2024 |
7 min read
Netlas vs Fofa: Platforms Comparison
Below is a detailed technical comparison of two popular IoT search engine platforms: Netlas and Fofa. We evaluate their performance across three critical parameters: capabilities, data volume and relevance, and enterprise features. Which platform excels where, and how can you choose the one that best suits your needs?
- Vyacheslav Makhrov
December 18, 2024 |
20 min read
Netlas vs Shodan: Platforms Comparison
IoT search engines are essential tools for any red team specialist. With several solutions available on the market, each offering its own set of pros and cons. This article will review and compare two of them: Netlas and Shodan.
- Vyacheslav Makhrov
November 21, 2024 |
20 min read
Google Dorking in Cybersecurity: Techniques for OSINT & Pentesting
Google dorking is a must-know technique for uncovering hidden resources on the internet. In this article, we’ll explore how Google dorking can be leveraged in information security, examine practical examples, and introduce alternative techniques to enhance your cybersecurity toolkit.
- Vyacheslav Makhrov
October 8, 2024 |
14 min read
7 Tools for Web Penetration Testing
Web applications are now deeply embedded in our daily lives, often housing significant amounts of sensitive data, including personal information, financial details, and trade secrets. Therefore, securing these applications against cyberattacks is of paramount importance.
- Vyacheslav Makhrov
September 13, 2024 |
15 min read
Using DNS History in Cybersecurity
One of the most valuable data sources for an information security professional is DNS history. It plays a crucial role in building an attack surface, investigating phishing sites, conducting OSINT, and various other processes. In this article, we will explain how to easily retrieve DNS history for any domain and demonstrate straightforward methods for using this information to counter specific types of attackers.
- Vyacheslav Makhrov
August 30, 2024 |
14 min read
Mastering Online Camera Searches
Intrigued by global events? Live cameras offer a solution. Millions of exposed webcams worldwide provide real-time views of cities and remote locales. For virtual explorers, these feeds satisfy curiosity. But their true power lies in OSINT applications. Analysts use them to track live events, like public gatherings and conflicts.
- Vyacheslav Makhrov
September 5, 2024 |
13 min read
Best Attack Surface Visualization Tools
Pinpointing the attack surface is vital for defensive and offensive cybersecurity teams alike. Undoubtedly, visual mapping outshines simple lists. Experts quickly grasp entity connections, spotting opportunities and threats. Specialists leverage the visual format to craft optimal plans, maximizing efficiency and insight.
- Vyacheslav Makhrov
July 13, 2024 |
5 min read
Complete Guide on Attack Surface Discovery
Understanding and managing the attack surface is essential for maintaining strong security defenses. This guide offers a complete way to map your attack surface. It will help you find vulnerabilities, assess risks, and implement security measures. We will cover steps to inventory assets and track changes in the IT environment.
- Vyacheslav Makhrov
October 9, 2024 |
15 min read