Questions tagged [domain]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
81 views

What is the best way to validate third-party domains calling an API?

Our business is in the payment processing space and one of our core products is a Payment Gateway API. In terms of security we issue an API Key, Signature and RSA Encryption for sensitive information ...
chris's user avatar
  • 103
0 votes
0 answers
35 views

simulating a domain user logon on machine startup

I'm currently working on a lab for AD penetration testing and want some of the machines to have a logon, including the TGT, for a specific domain user cached. So far I couldn't come up with anything ...
s1gsegv's user avatar
2 votes
1 answer
119 views

Would a bricks-and-mortar large firm benefit from anonymous domain registration?

Recently, doing "whois" on random large Fortune 500 style bricks-and-mortar companies, I've seen a few use private/"anonymous" registrations. Normally you see stuff like Registrant ...
Harper - Reinstate Monica's user avatar
34 votes
4 answers
9k views

Domain about to expire. Afraid that new owners will spread malware

I have a domain that is about to expire. It was used for hosting my freeware which I do not maintain anymore but can still be found on shareware directories. The application points to my domain (...
microwth's user avatar
  • 2,493
1 vote
2 answers
121 views

Country code top-level domain (ccTLD) hijacking?

Imagine a country ruled by a non-democratic government with an explicit disregard to local and international laws. The national registry for local domains (Country code top-level domains) falls under ...
webbasica's user avatar
1 vote
2 answers
186 views

Are there any security reasons against "drop-www" (using example.com instead of www.example.com)?

Are there any security reasons against "drop-www"? In other words, are there any security reasons against using an apex [1] domain name such as example.com instead of a subdomain such as www....
adrelanos's user avatar
  • 744
2 votes
1 answer
231 views

Amazon Cloudfront trackers, do they mean anything in an investigation?

One way I use to find domains owned by the same people is through tracking codes (Google Analytics and such). Recently I've come across a domain with this tracker code: d1lxhc4jvstzrp When I lookup ...
CBot's user avatar
  • 33
0 votes
2 answers
140 views

DomainFronting - re-routing and SSL certificats

I'm looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting. Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-...
user281868's user avatar
0 votes
1 answer
1k views

Does alias in a truststore matter?

I was trying to add a new certificate to our truststore. But I got the alias already exists error. I can't remove the old certificate yet, but I have to add the new certificate. Will it matter if I ...
ssl_noob's user avatar
0 votes
1 answer
95 views

How to get my exploit script served on arbitrary subdomain?

Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the ...
Sjoerd's user avatar
  • 29.6k
0 votes
1 answer
114 views

Can I escalate a main domain SSTI/RCE to all the subdomains belonging to that domain?

I'm a newbie ethical hacker and bug bounty hunter. Lets, assume my target is somethingtohack.com, the thing is the company's scope defines that the main domain is out of scope, but subdomains like ...
Offensive Bug Hunter's user avatar
1 vote
0 answers
356 views

Looking for origin/ verification of malicious domain names [closed]

My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
Kbowser's user avatar
  • 11
0 votes
0 answers
332 views

What are security risks of a domain user accounts with denied interactive logon?

When I create domain user account with denied interactive logon, what are real security risks when hacker gets the password? http://paulasitblog.blogspot.com/2017/01/deny-interactive-logon-for-service....
Vojtěch Dohnal's user avatar
1 vote
3 answers
777 views

Should I have another domain name for my company internal tools

My company has a domain name that we use to serve our customers, say company.com for the main website, app.company.com for the web application and api.company.com. These are all public domains that ...
drpexe's user avatar
  • 785
-1 votes
2 answers
358 views

How does DNS-01 validation for LetsEncrypt know what the right IP address is?

For my personal use, I bought a domain for internal ssl validation for my pfsense. I was able to get the LetsEncrypt's ACME script to successfully validate my domain and produce an ssl certificate for ...
SILENT's user avatar
  • 166
-1 votes
1 answer
96 views

Are purchased domains from third party registrar or hosting managers without Cpanels or VPS or Editable Pages hackable?

If someone buys a domain and one may type the URL in but just sees a template page from the registrar but doesn’t purchase a cPanel or VPS or root access or any way to edit the website, does the ...
Coo's user avatar
  • 109
0 votes
1 answer
647 views

Should I use my own domain in my proton mail?

Using my own domain on Proton Mail is cool, but what if someone hack my namecheap account? What if some government orders that my domain is redirected? Should I use @protonmail instead of @mydomain? ...
Guerlando OCs's user avatar
1 vote
1 answer
111 views

Is unrestricted query access to dedicated DNS server considered an insecurity?

Let's say hypothetically a business has a network and some respective infrastructure. Importantly, a VPN for giving remote secure access to work resources, and a (not so)private DNS server for DNS but ...
Cipher Visor's user avatar
0 votes
1 answer
128 views

Realistic for organizations to avoid links in emails pointing to less known sites?

Over the years, I found myself constantly pointing out to organizations that emails containing links with 3rd party domain names that are relatively unknown are problematic. That's how social ...
user2153235's user avatar
1 vote
1 answer
121 views

Email "FROM address" is changed to an unexpected email address

I have enabled DMARC settings in my domain (drkotzi.org). Now when I send emails from my email address ([email protected]) to email lists or email groups, I can see that the email's from address and ...
yello_flash's user avatar
0 votes
0 answers
219 views

Non-malicious root causes for multiple failed logon in windows domain

While monitoring SIEM alerts, I saw that there was more than 200 failed logon for a user to several hosts in the domain. Obviously, it was triggered as a brute-force attempt. Assuming it was not an ...
Onyx's user avatar
  • 21
1 vote
1 answer
209 views

Why do administrators create passwords vulnerable to kerberoasting? [closed]

I was researching a kerberoasting attack on the Active Directory domain. To create the stand, I used a Domain Controller on Windows Server 2016 and one client machine on Windows 10. SQL Server was ...
Dmitry's user avatar
  • 13
0 votes
1 answer
383 views

A single IP address hosts multiple domain at the same time. How do I scan a single domain using nmap or other tools?

Let's say an IP address hosts multiple domains, (example.com, example.net, example.org, etc.). How do I port scan a specific domain?
bang_jagoet's user avatar
0 votes
2 answers
118 views

allowing users to add custom html/js code and show it only under another domain

I have a web app where I allow users to create a one-page portfolio using drag and drop, also I allow them to add custom HTML freely (basically any html or js code) I'm aware that I shouldn't allow ...
medBouzid's user avatar
  • 129
0 votes
1 answer
201 views

Is an IP not being redirected to it's associated domain considered unsecure?

I've got a server that has domain and an SSL Certificate issued to that domain. It's expected behavior that when an IP address is browsed, it redirects to the domain name of the server and the SSL ...
Crashie's user avatar
  • 23
0 votes
1 answer
97 views

.local domain any possible ways in getting the extension

I was recently working on Broken link Hijacking and found a link in a target which reflected on multiple pages. It was portal.REDACTED.local which was not accessible and returned response as bad host. ...
None_None's user avatar
1 vote
1 answer
204 views

Is it possible for a domain to be faked?

I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
Coderxyz's user avatar
  • 560
0 votes
1 answer
199 views

What is the list of known host domains where subdomains come from different providers?

I recall that there is a list of hosting domains that are known to have subdomains from different sources, as for example wix.com and appspot.com, built into browsers. For such domains, subdomains do ...
Joshua Fox's user avatar
2 votes
1 answer
1k views

how can I find all the websites on a particular IP? [duplicate]

When I try to find websites hosted on a specific IP using one of the online Reverse IP Lookup tools, I only get one website, but when I use Sub-domain enumeration, I find several websites on the same ...
alex's user avatar
  • 23
1 vote
1 answer
167 views

Protecting a website from being kidnapped

I have a MediaWiki website in Hebrew; As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible. I chose to give that website a Global TLD (a non ...
George's user avatar
  • 11
3 votes
2 answers
3k views

Problems with using a non-reserved top-level domain for local DNS resolution

A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
huanglx's user avatar
  • 175
0 votes
1 answer
1k views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
teauxfu's user avatar
0 votes
1 answer
1k views

Cookie domain security

Recently, I started diving into cookies, but as far as the domain property is concerned I don't think it is straightforward. I read this article: http://web.archive.org/web/20200418163316/https://www....
Maikkeyy's user avatar
  • 187
0 votes
1 answer
199 views

Point domain to IP address on Cobalt Strike [closed]

On Cobalt Strike how do I point a domain (in this case a subdomain) to the IP address to create a listener?
little_stacker's user avatar
1 vote
0 answers
61 views

How the information from different resources are used in calculating the reputation score of a domain name in whoisxml (domain reputation API)?

I'm trying to obtain the reputation score of a domain name from whoisxml. There are some resources listed in their website such as the website content and it relation to other domains, and host ...
Haleh's user avatar
  • 11
1 vote
1 answer
513 views

No MX Records on a Possible Phishing domain?

I saw on my SMTP logs that it queried a possible phishing domain, I look up on its MX records and it didn't have one. Does the domain need an MX record before sending phishing emails?
The Guest's user avatar
0 votes
0 answers
126 views

Risks associated with developers using their own domain for development services

We have some development and test environments using our canonical domain, e.g. dev.example.com. We also use some services from 3rd party providers that have obscure URLs like xjkhasdkjvhas.dns.ashdfb....
DLT's user avatar
  • 1
0 votes
0 answers
30 views

Is one top level domain more inherently secure than another? [duplicate]

There's an interesting discussion going on at work right now. Someone wants to move their app off a .com domain and put it on a .net domain. They contend a .net domain can provide the level of ...
MGoBlue93's user avatar
  • 183
2 votes
0 answers
280 views

Mirror site attack [closed]

I've created and published a .com web-application (nodejs-express in backend, react in frontend) with social-login (facebook, google, linkedin etc..). But I haven't gone out publicly to ask people to ...
user1506145's user avatar
1 vote
1 answer
176 views

Would my IP be recorded when I visit a website

Could the website owner (admin) determine whether to record users IP? If the website owner (admin) doesn’t want to record users IP, will the host provider or domain name provider still get and record ...
gudako's user avatar
  • 133
2 votes
1 answer
262 views

Another domain pointed to my server, what are the risks?

I recently had another domain point to one of my servers. After adding some nginx configuration I was able to mitigate this. My server now throws a 404 in this scenario. My question is what are the ...
Anonona's user avatar
  • 123
0 votes
1 answer
154 views

Universal DNS Resolver [closed]

I would like to implement a DNS client which should be able to resolve any valid domain public, private or otherwise (tor,i2p). What's the best way to achieve this? I know that I need to pick a ...
jamie's user avatar
  • 3
3 votes
4 answers
469 views

Should I buy nonsense domains just to make sure my clients don't visit a misspelled domain?

I have my new website to be published (it's called buysteel.com). I will have thousands of clients visiting my site every month, and I would like to protect them around and at the site. Is it worth ...
tungsten's user avatar
  • 421
0 votes
1 answer
90 views

One domain using certificate of other domain [closed]

I recently Googled a website e.g A.com and found B.com in search result at the top. In reality A.com should be on top as B.com doesn't have anything in common or related to A.com but Google shows it ...
Alkemi's user avatar
  • 3
0 votes
1 answer
178 views

Subdomain api.domain.com - more vunerable to attacks?

I am in the process of setting up an api which will have the subdomain "api.", I have been advised to change this to something "less obvious" to avoid automated attacks against it. I can't find any ...
Mike's user avatar
  • 25
0 votes
2 answers
824 views

how one can find out sub-domains of a domain without brute-force?

I had to edit my original question after several answers were submitted. Original question was: how one can find out sub-domains of a domain without brute-force? is there a way to request a domain ...
user188145's user avatar
0 votes
2 answers
323 views

How to check if a list of domains contains any WordPress installation?

Does any software or any other way to detect if a website contains any WordPress installation? For example lets say we have the website example.com which is not a WordPress site, but we have a ...
chrysst's user avatar
  • 157
104 votes
8 answers
28k views

Can someone read my E-Mail if I lose ownership of my domain?

Let's assume I have a server set up with an email address like [email protected]. Now I have distributed my business card with the e-mail address to all people all over the world and they keep sending ...
Skiddie Hunter's user avatar
2 votes
2 answers
395 views

Ransomware - All computers infected but one

Let's say there is a particular network which has a "monthly" successful cryptolocker attack. Every time, every computer in that network is infected. The set up is like this: 1x Windows 2003 server (...
Djov's user avatar
  • 121
1 vote
0 answers
125 views

How to enforce E-mail Account Security with regards to Custom Domains & 2FA?

Lately I've been bothered by the fact that should one of my e-mail accounts be in some way compromised despite its long and randomized password phrase. I'd have hell to pay since it is effectively a ...
hurtcomplex's user avatar