Collaborate Disseminate
Where I work, we have many subdomains of our main domain pointing to ELB instances (with CNAME records) that are no longer in use (like my-loadbalancer-1234567890.us-west-2.elb.amazonaws.com). I realize this is a bad practice… Continue reading Is it safe to have a DNS record pointing to an unused AWS ELB instance?
I bought my domain from NameCheap, and I pointed that to Cloudflare then the Cloudflare pointing to Github pages.
Now is it possible to get CNAME records that added to Cloudflare?
———– ———— ——–… Continue reading Can I get the CNAME records from cloudflare? [on hold]
Suppose the CNAME of www.anydomain.com is pointing to the www.anydomain.com.cdn.cloudflare.net. Can an attacker try to exploit the Subdomain Take over?
Continue reading Is it possible to Subdomain Take Over with Cloudfare?
I was testing a site on hackerone, and found the subdomain image.email.example.com
I noticed it showed this error message: “The requested URL “[no URL]”, is invalid.” and was hosted on AkamaiGHost.
Does this error message m… Continue reading "The requested URL "[no URL]", is invalid." does this mean possible subdomain takeover
I want to block all traffic to and from my network to a particular domain. Apparently, this is not possible in Windows, with either a HOSTS file or using firewall rules: the HOSTS file requires every sub-domain to be listed s… Continue reading how block all subdomains for a particular domain
I have a main domain where I serve my website, and then I have subdomains that I use to deploy other projects which may be temporary. Having set up a deployment system with docker and letsencrypt, each project automatically h… Continue reading Can the subdomains have different certificates from the main domain if I use HSTS includeSubDomains and preload?
Currently, we have a number of domains for various purposes like back office, production, DMZ, partners, etc. There has been a change in management thinking to simplification. They want all the resources to fall under one tru… Continue reading My company is considering collapsing from multiple independent domains to one trust network
INTRO
On hackerone I see a few people writing reports on subdomain takeover due to improper records (CNAME I believe). I want to learn this ‘skill’ too.
QUESTION
I found a snapchat (sc-cdn.net) domain which is pointing to… Continue reading Subdomain takeover due to improper records
I know there are some tricks to play with wildcards to make a certificate to be valid for all the subdomains ( such as here), but my question is what is the design reason that certificates can be issued for subdomains. Why so… Continue reading Why one may want to get different certificates for different subdomains?
(I’ll use website.com in place of the actual domain as to not disclose any specific website vulnerability)
I noticed on a website that their crossdomain.xml file allowed access from another website with this code: <allow-… Continue reading Can I send/receive HTTP requests/responses with a subdomain on a crossdomain.xml file?