Collaborate Disseminate
When doing a VPN security check/test (on IPLeak.net for example), to see if your VPN connection is secure, you can see if you are leaking IP/WebRTC or DNS.
When having 2 or 4 DNS address servers in one result and a minute later almost 60 (… Continue reading Test of VPN DNS leaks shows up to 60 DNS servers [closed]
I’m looking for some domain name whose purpose is to act as a bogus malicious/suspicious/untrusted website or endpoint to be used as an example or in documentation.
IANA has reserved example.com for general purpose, is there an "evil&… Continue reading Is there any domain name one could use as a fake malicious website example?
Collaboration is a key component of any successful business strategy, but it’s not always a simple task. The conflicting goals of individual teams means that different operations can become siloed, with each team working with specific requirements and … Continue reading Network and security teams must collaborate to successfully deliver digital transformation
I am a fairly security conscious web developer. One of my clients has their website hosted outside their corporate system, but all other services, including email and domain services go through their corporate IT Dept.
Their web host chang… Continue reading On having received DNS records that are not my business
I am a fairly security conscious web developer. One of my clients has their website hosted outside their corporate system, but all other services, including email and domain services go through their corporate IT Dept.
Their web host chang… Continue reading On having received DNS records that are not my business
Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the whitelisted value in the subdomain.
E.g. … Continue reading How to get my exploit script served on arbitrary subdomain?
Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the whitelisted value in the subdomain.
E.g. … Continue reading How to get my exploit script served on arbitrary subdomain?
SecurityScorecard and CSC released comprehensive research detailing the impacts of an organization’s choice in domain registrar on their overall security ratings. The research shows that companies that select enterprise-class registrars (ECR) for domai… Continue reading Not all domain registrars are created equal: Consumer-grade vs. enterprise-class
It’s been my understanding in the past years that it’s not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily possible to find all domains/submains … Continue reading All private subdomains found and listed, including those from my home IP
Have have four name servers that control many other domains:
ns1.domain-name-our-brand-example.com
ns2.domain-name-our-brand-example.com
ns3.domain-name-our-brand-example.com
ns4.domain-name-our-brand-example.com
We want to improve the se… Continue reading Paranoid Host Provider: When creating a fully redundant and failover domain name server (DNS) hierarchy – do we need to specify different TLDs?