Automated Security Testing With OWASP Nettacker

on YouTube ↗56m

" summary

OWASP Nettacker scans IP ranges and subdomains at scale, running modular Python probes (port, subdomain, X‑Powered‑By, vapalizer tech fingerprinting, brute force) and outputs HTML/CSV/JSON plus a database for queries. Demos show it found vulnerable Exchange servers, discovered devices with brute‑force default credentials, and scans an entire organization in minutes. It runs in Docker, exposes a REST API/web UI, and integrates into CI so teams can run an automated nightly GitHub Action scan and keep machine-readable inventories for remediation.

AI-written summary · about

" chapters (10)

1. 0:00Introduction
2. 3:35What is OWASP Nettacker
3. 12:04Key features of Nettacker
4. 20:51Running Nettacker with modules
5. 23:21Live demo: scanning subdomains
6. 27:18Generating Nettacker reports
7. 31:14Nettacker API and web UI
8. 36:59Automating with GitHub Actions
9. 46:53Use cases for defenders
10. 49:49Q&A

" related talks

• 54mAutomated Security Testing with OWASP NettackerSam Stepanyan · NDC Security 2026
• 34mOWASP NettackerArkadii Yakovets, Sam Stepanyan · OWASP Global AppSec San Francisco 2024
• 26mOWASP Nettacker Project PresentationSam Stepanyan · OWASP 20th Anniversary 2021
• 55mAutomating Security Testing with the OWTFJerod Brennen · CodeMash 2018
• 38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities ProactivelyPeter Yaworski · Øredev 2018
• 01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability DetectionTobit Lill · code.talks 2023
• 58mOpen Source Pentesting and Security Analysis Tools: the DevOps wayChristian Nils Schneider · DevOpsCon Spring 2019
• 32mAutomating Web Application Bug HuntingJonathan Cran, Jerry Gamblin · BSidesSF 2019