El Kraken at Ekoparty Security Conference 2023

The talk#

At the latest edition of Ekoparty I had the chance to present a tool I had been working on for several months. It is El Kraken, which is really just a set of bash scripts alongside public tooling that is widely used and well known in the bug bounty world.

So what is new about this tool? How is it different from the ones that already exist? It is designed to optimise the timing of the recon process during bug bounty or pentesting, while saving on VPS costs.

How the cost saving works#

The saving comes from leaning on the flexibility GitHub Actions gives you to spin up very powerful servers on demand, in this case on the DigitalOcean platform. On top of that, in the talk I explain how to gain real-time visibility into the scans performed with open source tooling.

For more technical detail on how to build it, check my previous post where I walk through the implementation step by step.

The underlying idea#

The goal of the video is to show how it works and give you a base to use this tool, or even to build your own, all on top of open source tooling shared by the community.