0

Is it possible for an attacker to get a list of the subdomains configured for my server, if every subdomain request gets resolved?

In the case of a subdomain that doesn't exist, the server simply resolves to a standard page. In my case it is the "Webserver Default Page" provided by Parallels Plesk.

3
  • 2
    if the crawler is configured to disregard the default text, then crawlers can certainly enumerate your subdomains because their content is different
    – schroeder
    Dec 2, 2015 at 17:48
  • @schroeder But wouldn`t this be seen as a DDos attack in some way by the server/hoster and could be prevented by establishing certain DDos protection tools ? (In contrast to just crawling DNS Records and not directly connecting to the page/server itself)
    – Tim
    Dec 2, 2015 at 18:16
  • 2
    It depends on the speed and methods of the crawling
    – schroeder
    Dec 2, 2015 at 18:17

1 Answer 1

1

As Schroeder stated, if the crawler is configured to not hammer your server with requests, it could most certainly enumerate each subdomain. If this is for hiding something like an admin panel, you would be best off relying on a secure login system rather than obscuring the site as you don't want to rely on security by obscurity.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .