Collaborate Disseminate
How do I check from server side/using bash shell how many domains are hosted on the server?
The goal is to discover how many domains are hosted on the server that are exposed via http/https. (Can be connected to remotely)
I know I can ca… Continue reading Check how many domains are hosted on a linux server (server side)
This question already has an answer here:
Security implications of providing users subdomains on my domain?
2 answers
I a… Continue reading Are there any risks selling subdomains? [duplicate]
I’m scanning a network (whose name will not be stated). It has >1 IP addresses. When I tried scanning its subdomains, there are several subdomains that are translated to the same IP address but return different scan reports (… Continue reading nmap: Same IP, different domain names, different results?
I have created Makefile to simplify generation certificates for local development:
DOMAIN ?= localhost
NAME ?= ${DOMAIN}
CAKEY ?= CAkey.key
CACERT ?= CAcert.pem
SIGN_REQ ?= ${NAME}.csr
CERT ?= ${NAME}.crt
PE… Continue reading Wildcard certificate generated for local CA do not work for the subdomains
I’m writing an application (example.com) that gives users their own sub-domains to run arbitrary user applications off of (user.example.com).
Each user application will be run on separate servers with distinct domains, and m… Continue reading Are subdomains secure from one another if they are on separate servers?
I have an app that was in a folder on my main site’s root directory www.example.com/app which was recently hacked and the entire website was offline because the server load was too high and the database was corrupted somehow…. Continue reading can an attacker exploit my main site from subdomain?
I found an xss on subdomain.example.com and i verified that the domain api.example.com accepts subdomain.example.com as valid origin. Can i exploit this as cors by inserting a CORS script in subdomain.example.com and send the… Continue reading Is it possible to exploit this cors?
I found an XSS on subdomain.example.com, is it possible to use that xss to extract the response of an api request from the main domain example.com/api/xyz?
The xss is on subdomain.example.com and I’d like to extract the whol… Continue reading Is it possible to extract data from api response from main domain?
I’ve looked on for an answer on google and other forums for this question but couldn’t get a solution or a hint for the scenario that I have.
I’ve a domain, say abc.com, which is live with ssl on wpengine. Now we need to sho… Continue reading setting up ssl for cname only subdomain
This question already has an answer here:
How can I find subdomains of a site?
8 answers
It is possible to scan subdomain… Continue reading Subdomain scanner without brute-force attack? [duplicate]