Collaborate Disseminate
Say you have this:
An NPS server that grants access to users using client certificates (EAP-TLS).
So for example someone managed to snatch the domain administrator’s password and they log in to the computer using the domai… Continue reading Is there a more secure way for users to log into the domain other than just passwords?
Currently, we have a number of domains for various purposes like back office, production, DMZ, partners, etc. There has been a change in management thinking to simplification. They want all the resources to fall under one tru… Continue reading My company is considering collapsing from multiple independent domains to one trust network
Assume that we have two websites with two different owners. Both of them set their domain name server to john.ns.cloudflare.com and joly.ns.cloudflare.com. The first owner set both domains in his account in CloudFlare and set… Continue reading How can Cloudflare determine the owner of a website?
“Redirecting…Strontium domains will directly disrupt current Strontium infrastructure.” Continue reading Microsoft’s secret weapon in ongoing struggle against Fancy Bear? Trademark law
Reviewing DNS logs within my company I’ve found a lot of weird DNS requests from a machine involving what it seems a DGA scheme as shown below (real IP has been obfuscated):
04/07/2017 13:36:47 12C8 PACKET 0000000005492E80 U… Continue reading DGA scheme on local network
A couple of days ago I have registered a new domain on GoDaddy without WHOIS privacy option. The next day after registration I have started receiving spam in my mailbox as well as on my phone. The domain is dormant in the sen… Continue reading Receiving lots of spam after registering a new domain on GoDaddy
A couple of days ago I have registered a new domain on GoDaddy without WHOIS privacy option. The next day after registration I have started receiving spam in my mailbox as well as on my phone. The domain is dormant in the sen… Continue reading Receiving lots of spam after registering a new domain on GoDaddy
INTRO
On hackerone I see a few people writing reports on subdomain takeover due to improper records (CNAME I believe). I want to learn this ‘skill’ too.
QUESTION
I found a snapchat (sc-cdn.net) domain which is pointing to… Continue reading Subdomain takeover due to improper records
Can you trust that .feedback site really belongs to who you think it belongs?
David Bisson reports.
Continue reading Feedback scammers attempting to extort millions from 5,000 major companies
A domain can have plenty of name servers registered at there domain registrar. The name servers are picked randomly and not like expected primary first, secondary second and so on.
Knowing that, does this mean that when one… Continue reading Availability at risk due to one offine Domain Name Server? [migrated]