JSAC2024 Mihari Workshop

Acknowledgements

Thanks for @snkhan and @sepi140 for their kindly helps.

Warning

• Do not access to possibly malicious IPs, domains and URLs via the conference network!
• This document is written on based on Mihari v7.3 and specs subject to change in the future.

Time Table

• 00:00-00:30 - Introduction, Setup, Architecture and Rule
• 00:30-00:40 - Ex.1 CT Log Based Subdomain Enumeration
• 00:40-00:50 - Ex.2 MoqHao Landing Pages
• 00:50-01:00 - Break
• 01:00-01:20 - Ex.3 Honeypot
• 01:20-01:30 - Vs. ProjectDiscovery
• 01:30-01:50 - Ex.4 Working With Nuclei
• Practical Operation With Mihari (If time allows)
• 01:50-02:00 - Wrap-up / Q&A