
1/11/2023 · Chris Moberly
What this post added
This post details the implementation of an automated web attack surface monitoring solution using GitLab CI/CD and GitLab Pages. It outlines the creation of three shell scripts (`setup.sh`, `discover-services.sh`, `take-screenshots.sh`) to install tools (httpx, gowitness), identify web services, and generate screenshot reports. The `.gitlab-ci.yml` file configures these scripts to run in a pipeline, with the output published via GitLab Pages. It also covers defining target lists using CI variables and scheduling pipeline runs.