Collaborate Disseminate
I ran a to DNS Name [Robtex] transform in Maltego on a domain, but its shoing random wildcard subdomains, which dont show up if i use any other tools, or examine current DNS records.
What could be the explanation?
The DNS resolving process ultimately relies on root servers located in the USA for most extensions (.com and .org root servers for example). Even if the IP addresses of these servers are cached by local DNS resolvers in my co… Continue reading Domain name vs IP only hosting?
I have been receiving spam emails on my many mails but specifically gmail from a .jp domain. I delete the emails but today i decided to actually read one of those emails to see if they can send me my inheritance from this Nig… Continue reading Peculiar Japanese DNS arrangement
One of the recommendations to prevent phishing using look-alike domain names (like www.google.com.phishing.org or IDN homograph attacks) is to use a password manager or a physical security token like a YubiKey, because since … Continue reading Why are there no browser feature or extension to only check the domain and username to prevent phishing?
I don’t understand what is a DNS object in Maltego. I know what is the NS and MX information related to a Domain. However, “to DNS Name [Robtex]” transform gives me many DNS Objects and I don’t know how to read them.
I have generated a DNS public-key (as far as I recall it is an rSA key). Given the key (ZSK and KSK), how can I figure our its length? how can I make sure it is RSA or another type?
For example, this is saved in a example.ke… Continue reading How can I find the publick key length of a dnssec public key
I have question around DLP from a corporate network.
I have a Virtual Machine on a corporate network. The VM can access an Azure SQL DB in the cloud: aaa.database.windows.net
However, I don’t want that same VM to connect t… Continue reading Azure SQL Database and corporate networks
I’m in need of some distributed processing, the cheapest way for me to get that processing power is renting some dedicated servers from a company with specialized hardware for this.
The servers that they have aren’t interna… Continue reading Can a domain name be trusted?
I have Microsoft Dns service (win2016) in DMZ on the inside of the network. It has also Domain controller role,i want to create a new security policie and considering some changes. Is it best to have my DNS servers on the In… Continue reading DNS servers in DMZ or Inside Zone?
I’m writing a blog post analyzing a list of phishing domains and I’m coming across a lot of IDN homograph attack domains and these “subdomain attack domains” but I cannot find the technical/good way to describe it.
For examp… Continue reading What is this phishing technique called using subdomains