? shortcuts

Module 3

🟢Beginner

1 hour

Your First ASM Scan

Prerequisites: Module 2 completed

Learning Objectives

Perform passive subdomain discovery
Identify live web services
Take screenshots for visual reconnaissance
Understand scan output and results

Resources

Hands-On Activities

Choose a safe target domain (your own or authorized) (5 min)
Run passive subdomain enumeration (15 min)
Probe for live web services (10 min)
Take screenshots of discovered services (15 min)
Analyze and document results (15 min)

Success Criteria

Progress0%

Successfully discovered subdomains
Identified live web services
Generated screenshots
Can interpret scan results

Knowledge Check

5 questions · 70% to pass

1. Which command performs passive subdomain enumeration with Amass?

2. After discovering subdomains, what does httpx do in the workflow?

3. What is the purpose of taking screenshots with a tool like gowitness?

4. Which target is appropriate for your first ASM scan?

5. What is the correct order of the first-scan workflow?

0/5 answered