23 ms·
Question: How does a subdomain get discovered by a member of the public if there are no references to it anywhere online? The only thing I can think of that wo
by EQYV 2y ago
Question: How does a subdomain get discovered by a member of the public if there are no references to it anywhere online?
The only thing I can think of that would let you do that would be a DNS zone transfer request, but those are almost always disallowed from most origin IPs.
https://en.m.wikipedia.org/wiki/DNS_zone_transfer https://en.m.wikipedia.org/wiki/DNS_zone_transfer
- arccy 2y agoyou also have zone walking with DNS NSEC https://www.domaintools.com/resources/blog/zone-walking-zone-enumeration-via-dnssec-nsec-records/ https://www.domaintools.com/resources/blog/zone-walking-zone...
- dnsfax 2y agoCertificate transparency logs.
- yatralalala 2y agoSee my comment above https://news.ycombinator.com/item?id=43289743 https://news.ycombinator.com/item?id=43289743 there are many techniques!