Overcast Security

[Mikey @mikey96_bh]

Interested in receiving automated alerts when your favourite program deploys new assets? Try out @OvercastASM - save your search queries, choose slack/discord and we do the rest. The best part? It's free to use. Content discovery on new assets to follow!

[Dolan @0xdolan]

I had the chance to provide some feedback on @OvercastASM's security service & it was a great experience. The implementation was fast, and the service provided a range of advanced security features that I thoroughly enjoyed. I highly recommend it! Thanks to the advice of @lu3ky13

[Overcast Security @OvercastASM]

@rhetoric_URBAN @mikey96_bh You can find our blog post here:

https://t.co/Pu5ZdgpBx4

[Mikey @mikey96_bh]

Bug Bounty is all about discovering attack surface, @hgreal1 and I managed to find this RCE on a target by looking at non-trivial ports hosting web servers through @OvercastASM. You can query HTTP/HTTPS services and exclude any ports, give it a try! https://t.co/AFCNlOm6U6

[Mikey @mikey96_bh]

During Bug Bounty I always look at cloud storage devices, landing some nice finds.
@OvercastASM has recently released a feature for Cloud Storage, where you can query permissions of buckets and also see how much/what file extensions they contain. Try it: https://t.co/AFCNlOm6U6

[Overcast Security @OvercastASM]

Check out our latest update! Now you can get detailed information about your target, including SSL certs, JS files, cloud storage, historic URLs (wayback) and dangling DNS. #infosecurity #Security #CyberSecurity #BugBounty
- https://t.co/IVH2lmpayR

[Overcast Security @OvercastASM]

Congrats 🎊

[Mikey @mikey96_bh]

The Overcast ASM search engine tries to help you identify outliers and potential vulnerabilities through our newly released attack surface summary dashboard. Give us a follow @OvercastASM and try us for free at https://t.co/AFCNlOm6U6 and hopefully have some success!

[Peter M @pmnh_]

Been really enjoying working with @OvercastASM as a supplement to my bug bounty / pen testing toolkit. Helped me find a couple attack surface opportunities last week I would have completely missed otherwise. Excited to see the platform develop!

[haksec.io @haksecio]

@nnwakelam This? It's a great blog https://t.co/FSndtxt4Lw

I think you can achieve pretty much the same thing just using Shodan if you don't mind the data being a little out of date.

[Overcast Security @OvercastASM]

@ArmanSameer95 @ThisIsDK999 Not sure why it’s flagged as sensitive content

[Lu3ky13 ⚡️⚡️ @lu3ky13]

Access to SSH password and MongoDB database
I used this https://t.co/vfPGA3Iykc it's very cool
thank you @mikey96_bh

[Overcast Security @OvercastASM]

@xnl_h4ck3r @_shellehs_ @khalilelmadridi Apologies, can you double check right now?

[Overcast Security @OvercastASM]

The lucky winners are
@xnl_h4ck3r
@_shellehs_
@khalilelmadridi

Please DM US to claim your voucher
Stay tuned for future giveaways/events

[SickSec 🇲🇦 🇵🇸 @OriginalSicksec]

Exciting news! To commemorate the introduction of @OvercastASM, The innovative Attack Surface tool designed for bbh and pentesters, we're offering 3 premium @PentesterLab

- Sign up at https://t.co/mTpKbgMxU7
- Like & Retweet
- Follow @OvercastASM for announcement of winners.