Collaborate Disseminate
I need to figure out a good way to do internal subdomain enumerations in corp network? My goal is to find the list of internal subdomains in my organizations. I tried https://github.com/TheRook/subbrute but this is for extern… Continue reading how to do internal subdomain enumerations in corp network?
I’ve been learning more about subdomain takeovers and trying to find other risks of them.
I have a fairly simple question; what can you do with access to a website via a crossdomain.xml file?
(ex. you takeover a.example2.co… Continue reading What can I do with crossdomain.xml access to a website
I’ve been learning more about subdomain takeovers and trying to find other risks of them.
I have a fairly simple question; what can you do with access to a website via a crossdomain.xml file?
(ex. you takeover a.example2.co… Continue reading What can I do with crossdomain.xml access to a website
There’s lots of discussion about protecting content on example.com from user controlled content on subdomain.example.com (e.g. Github pages). What are the risks the other way around?
If my content is hosted at subdomain.exam… Continue reading XSS security concerns from untrusted parent domains
There’s lots of discussion about protecting content on example.com from user controlled content on subdomain.example.com (e.g. Github pages). What are the risks the other way around?
If my content is hosted at subdomain.example.com, what … Continue reading XSS security concerns from untrusted parent domains
I have a domain and a subdomain (on the same hosting) with isolated, jailed directories (no ability to go from one to another) and separate user accounts, as if they were two different domains (has own Control Panels, with f… Continue reading Any threats from isolated subdomain controlled by untrusted user?
I have a domain and a subdomain (on the same hosting) with isolated, jailed directories (no ability to go from one to another) and separate user accounts, as if they were two different domains (has own Control Panels, with f… Continue reading Any threats from isolated subdomain (controlled by hacker)?
Probably a rather odd question, but something that came to mind.
Wildcard certificates are about 10 times more expensive than a single certificate. However with a single certificate, you can secure sub-domains like secure.example.com ect…. Continue reading Single Domain SSL Certificate vs Wildcard Certificate
Suppose that my site is located at foo.example.com and I send the following HTTP header when visitors accessing my site using HTTPS:
Strict-Transport-Security: max-age=31536000; includeSubDomains
Would the HSTS policy have any effect on… Continue reading HSTS on a subdomain with includeSubdomains
There’re a number of security tools out there that enumerate the subdomains of a given domain. I wonder:
What’s the purpose of that in terms of security / hacking?
Is there any way to do that other than by brute-force with … Continue reading What is the purpose of subdomain enumeration?