SaaS Discovery : discovering methods to enumerate managed third-party SaaS platforms utilized by organizations with an online presence

Abstract

This project aimed to develop and implement effective methods for enumerating subscription-based software as a service (SaaS) platforms used by organizations with an online presence. By combining all known methods of finding SaaS platforms, the project created a comprehensive overview of a company's digital attack surface. The resulting tool, SaaS Discovery, is useful for hackers and security experts to identify potential vulnerabilities in a company's online presence. By exploring various techniques and tools for enumerating SaaS platforms, the project has provided a valuable resource for organizations looking to protect their data from potential threats. Fingerprinting was a key component of the project, allowing for the accurate identification of SaaS platforms and their associated data. The project was successful and the code will be implemented by Syndis in their product VikingR.