Questions tagged [domain]
The domain tag has no usage guidance.
117
questions
0
votes
1
answer
81
views
What is the best way to validate third-party domains calling an API?
Our business is in the payment processing space and one of our core products is a Payment Gateway API. In terms of security we issue an API Key, Signature and RSA Encryption for sensitive information ...
- 103
0
votes
0
answers
35
views
simulating a domain user logon on machine startup
I'm currently working on a lab for AD penetration testing and want some of the machines to have a logon, including the TGT, for a specific domain user cached. So far I couldn't come up with anything ...
- 1
2
votes
1
answer
119
views
Would a bricks-and-mortar large firm benefit from anonymous domain registration?
Recently, doing "whois" on random large Fortune 500 style bricks-and-mortar companies, I've seen a few use private/"anonymous" registrations.
Normally you see stuff like
Registrant ...
34
votes
4
answers
9k
views
Domain about to expire. Afraid that new owners will spread malware
I have a domain that is about to expire. It was used for hosting my freeware which I do not maintain anymore but can still be found on shareware directories. The application points to my domain (...
- 2,493
1
vote
2
answers
121
views
Country code top-level domain (ccTLD) hijacking?
Imagine a country ruled by a non-democratic government with an explicit disregard to local and international laws. The national registry for local domains (Country code top-level domains) falls under ...
- 11
1
vote
2
answers
186
views
Are there any security reasons against "drop-www" (using example.com instead of www.example.com)?
Are there any security reasons against "drop-www"?
In other words, are there any security reasons against using an apex [1] domain name such as example.com instead of a subdomain such as www....
- 744
2
votes
1
answer
231
views
Amazon Cloudfront trackers, do they mean anything in an investigation?
One way I use to find domains owned by the same people is through tracking codes (Google Analytics and such). Recently I've come across a domain with this tracker code:
d1lxhc4jvstzrp
When I lookup ...
- 33
0
votes
2
answers
140
views
DomainFronting - re-routing and SSL certificats
I'm looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-...
0
votes
1
answer
1k
views
Does alias in a truststore matter?
I was trying to add a new certificate to our truststore. But I got the alias already exists error.
I can't remove the old certificate yet, but I have to add the new certificate.
Will it matter if I ...
- 1
0
votes
1
answer
95
views
How to get my exploit script served on arbitrary subdomain?
Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the ...
- 29.6k
0
votes
1
answer
114
views
Can I escalate a main domain SSTI/RCE to all the subdomains belonging to that domain?
I'm a newbie ethical hacker and bug bounty hunter. Lets, assume my target is somethingtohack.com, the thing is the company's scope defines that the main domain is out of scope, but subdomains like ...
1
vote
0
answers
356
views
Looking for origin/ verification of malicious domain names [closed]
My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
- 11
0
votes
0
answers
332
views
What are security risks of a domain user accounts with denied interactive logon?
When I create domain user account with denied interactive logon, what are real security risks when hacker gets the password?
http://paulasitblog.blogspot.com/2017/01/deny-interactive-logon-for-service....
1
vote
3
answers
777
views
Should I have another domain name for my company internal tools
My company has a domain name that we use to serve our customers, say company.com for the main website, app.company.com for the web application and api.company.com. These are all public domains that ...
- 785
-1
votes
2
answers
358
views
How does DNS-01 validation for LetsEncrypt know what the right IP address is?
For my personal use, I bought a domain for internal ssl validation for my pfsense. I was able to get the LetsEncrypt's ACME script to successfully validate my domain and produce an ssl certificate for ...
- 166
-1
votes
1
answer
96
views
Are purchased domains from third party registrar or hosting managers without Cpanels or VPS or Editable Pages hackable?
If someone buys a domain and one may type the URL in but just sees a template page from the registrar but doesn’t purchase a cPanel or VPS or root access or any way to edit the website, does the ...
- 109
0
votes
1
answer
647
views
Should I use my own domain in my proton mail?
Using my own domain on Proton Mail is cool, but what if someone hack my namecheap account? What if some government orders that my domain is redirected?
Should I use @protonmail instead of @mydomain? ...
- 415
1
vote
1
answer
111
views
Is unrestricted query access to dedicated DNS server considered an insecurity?
Let's say hypothetically a business has a network and some respective infrastructure. Importantly, a VPN for giving remote secure access to work resources, and a (not so)private DNS server for DNS but ...
- 82
0
votes
1
answer
128
views
Realistic for organizations to avoid links in emails pointing to less known sites?
Over the years, I found myself constantly pointing out to organizations that emails containing links with 3rd party domain names that are relatively unknown are problematic. That's how social ...
- 105
1
vote
1
answer
121
views
Email "FROM address" is changed to an unexpected email address
I have enabled DMARC settings in my domain (drkotzi.org). Now when I send emails from my email address ([email protected]) to email lists or email groups, I can see that the email's from address and ...
- 31
0
votes
0
answers
219
views
Non-malicious root causes for multiple failed logon in windows domain
While monitoring SIEM alerts, I saw that there was more than 200 failed logon for a user to several hosts in the domain. Obviously, it was triggered as a brute-force attempt.
Assuming it was not an ...
- 21
1
vote
1
answer
209
views
Why do administrators create passwords vulnerable to kerberoasting? [closed]
I was researching a kerberoasting attack on the Active Directory domain. To create the stand, I used a Domain Controller on Windows Server 2016 and one client machine on Windows 10. SQL Server was ...
- 13
0
votes
1
answer
383
views
A single IP address hosts multiple domain at the same time. How do I scan a single domain using nmap or other tools?
Let's say an IP address hosts multiple domains, (example.com, example.net, example.org, etc.). How do I port scan a specific domain?
0
votes
2
answers
118
views
allowing users to add custom html/js code and show it only under another domain
I have a web app where I allow users to create a one-page portfolio using drag and drop, also I allow them to add custom HTML freely (basically any html or js code)
I'm aware that I shouldn't allow ...
- 129
0
votes
1
answer
201
views
Is an IP not being redirected to it's associated domain considered unsecure?
I've got a server that has domain and an SSL Certificate issued to that domain.
It's expected behavior that when an IP address is browsed, it redirects to the domain name of the server and the SSL ...
- 23
0
votes
1
answer
97
views
.local domain any possible ways in getting the extension
I was recently working on Broken link Hijacking and found a link in a target which reflected on multiple pages. It was portal.REDACTED.local which was not accessible and returned response as bad host.
...
- 45
1
vote
1
answer
204
views
Is it possible for a domain to be faked?
I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
- 560
0
votes
1
answer
199
views
What is the list of known host domains where subdomains come from different providers?
I recall that there is a list of hosting domains that are known to have subdomains from different sources, as for example wix.com and appspot.com, built into browsers. For such domains, subdomains do ...
- 239
2
votes
1
answer
1k
views
how can I find all the websites on a particular IP? [duplicate]
When I try to find websites hosted on a specific IP using one of the online Reverse IP Lookup tools, I only get one website, but when I use Sub-domain enumeration, I find several websites on the same ...
- 23
1
vote
1
answer
167
views
Protecting a website from being kidnapped
I have a MediaWiki website in Hebrew;
As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible.
I chose to give that website a Global TLD (a non ...
- 11
3
votes
2
answers
3k
views
Problems with using a non-reserved top-level domain for local DNS resolution
A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
- 175
0
votes
1
answer
1k
views
Why can I still receive email at my old domain after someone else bought it?
My domain expired years ago and was registered by another party.
I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes.
Now if someone buys ...
- 3
0
votes
1
answer
1k
views
Cookie domain security
Recently, I started diving into cookies, but as far as the domain property is concerned I don't think it is straightforward.
I read this article:
http://web.archive.org/web/20200418163316/https://www....
- 187
0
votes
1
answer
199
views
Point domain to IP address on Cobalt Strike [closed]
On Cobalt Strike how do I point a domain (in this case a subdomain) to the IP address to create a listener?
1
vote
0
answers
61
views
How the information from different resources are used in calculating the reputation score of a domain name in whoisxml (domain reputation API)?
I'm trying to obtain the reputation score of a domain name from whoisxml. There are some resources listed in their website such as the website content and it relation to other domains, and host ...
- 11
1
vote
1
answer
513
views
No MX Records on a Possible Phishing domain?
I saw on my SMTP logs that it queried a possible phishing domain, I look up on its MX records and it didn't have one. Does the domain need an MX record before sending phishing emails?
- 11
0
votes
0
answers
126
views
Risks associated with developers using their own domain for development services
We have some development and test environments using our canonical domain, e.g. dev.example.com. We also use some services from 3rd party providers that have obscure URLs like xjkhasdkjvhas.dns.ashdfb....
- 1
0
votes
0
answers
30
views
Is one top level domain more inherently secure than another? [duplicate]
There's an interesting discussion going on at work right now. Someone wants to move their app off a .com domain and put it on a .net domain. They contend a .net domain can provide the level of ...
- 183
2
votes
0
answers
280
views
Mirror site attack [closed]
I've created and published a .com web-application (nodejs-express in backend, react in frontend) with social-login (facebook, google, linkedin etc..). But I haven't gone out publicly to ask people to ...
- 121
1
vote
1
answer
176
views
Would my IP be recorded when I visit a website
Could the website owner (admin) determine whether to record users IP?
If the website owner (admin) doesn’t want to record users IP, will the host provider or domain name provider still get and record ...
- 133
2
votes
1
answer
262
views
Another domain pointed to my server, what are the risks?
I recently had another domain point to one of my servers. After adding some nginx configuration I was able to mitigate this. My server now throws a 404 in this scenario.
My question is what are the ...
- 123
0
votes
1
answer
154
views
Universal DNS Resolver [closed]
I would like to implement a DNS client which should be able to resolve any valid domain public, private or otherwise (tor,i2p). What's the best way to achieve this?
I know that I need to pick a ...
- 3
3
votes
4
answers
469
views
Should I buy nonsense domains just to make sure my clients don't visit a misspelled domain?
I have my new website to be published (it's called buysteel.com). I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth ...
- 421
0
votes
1
answer
90
views
One domain using certificate of other domain [closed]
I recently Googled a website e.g A.com and found B.com in search result at the top. In reality A.com should be on top as B.com doesn't have anything in common or related to A.com but Google shows it ...
- 3
0
votes
1
answer
178
views
Subdomain api.domain.com - more vunerable to attacks?
I am in the process of setting up an api which will have the subdomain "api.", I have been advised to change this to something "less obvious" to avoid automated attacks against it.
I can't find any ...
- 25
0
votes
2
answers
824
views
how one can find out sub-domains of a domain without brute-force?
I had to edit my original question after several answers were submitted.
Original question was:
how one can find out sub-domains of a domain without brute-force? is there a way to request a domain ...
0
votes
2
answers
323
views
How to check if a list of domains contains any WordPress installation?
Does any software or any other way to detect if a website contains any WordPress installation?
For example lets say we have the website example.com which is not a WordPress site, but we have a ...
- 157
104
votes
8
answers
28k
views
Can someone read my E-Mail if I lose ownership of my domain?
Let's assume I have a server set up with an email address like [email protected]. Now I have distributed my business card with the e-mail address to all people all over the world and they keep sending ...
- 1,118
2
votes
2
answers
395
views
Ransomware - All computers infected but one
Let's say there is a particular network which has a "monthly" successful cryptolocker attack. Every time, every computer in that network is infected.
The set up is like this:
1x Windows 2003 server (...
- 121
1
vote
0
answers
125
views
How to enforce E-mail Account Security with regards to Custom Domains & 2FA?
Lately I've been bothered by the fact that should one of my e-mail accounts be in some way compromised despite its long and randomized password phrase. I'd have hell to pay since it is effectively a ...
- 21