Questions tagged [domain]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
136 views

Viewing local users on a workstation when I'm SYSTEM on Forest PDC

I'm doing some exercises on a challenge lab. I'm SYSTEM on the Forest PDC. I need to figure out the SID of a local user on a machine in another domain in the forest. I can get there with PTH and run ...
3
votes
1answer
491 views

Enumerate forest trust relationships

I'm trying to up my Windows domain enumeration game. I'm doing some exercises where I'm tasked to find the forest trust relationships without exploitation or creds or being on the domain. All ...
1
vote
1answer
252 views

What is the effect on a domain when the secondary name server is compromised?

I've heard of a case wherein the domain name of the secondary name server was expired and free to register. Let's say example.com has two registered nameservers: example-ns1.com (primary) example-...
0
votes
2answers
157 views

Where to find current, live botnet executable clients

I've been able to find readily available botnet source code online however I'm currently working on my university research project and require access to an actual botnet client which encompases DGA's (...
0
votes
1answer
108 views

How to separate and secure domains using cPanel?

When you add a new domain in some hostings (i.e. 000webhost or some other hostings, which DOESNT USE cPanel) an entirely separate public_html is created (with a separate FTP login and etc..). But ...
3
votes
0answers
906 views

Do I need DNSSEC from GoDaddy?

I just registered a co.uk domain with GoDaddy. I've been managing domains for a few years now, and hosting my own website. I know a bit, but not enough to be safe with anything important like this. ...
0
votes
1answer
396 views

What are known domain hijacking methods?

The definition of domain hijacking is: "to gain (temporarily) control a domain" which could be either through: Stealing the legal and/or technical ownership of a domain (for example by transferring ...
1
vote
2answers
147 views

Spoofing domain registration date info

Is it possible to spoof or change backwards Domain Registration Date that can be looked up in online whois tools and databases?
1
vote
1answer
77 views

Is there any point in activating domain privacy after the fact?

If I have a domain name that does not have privacy protection enabled, is there any point in enabling it now? Or is it useless once the information is out there? I'm asking this because I'm aware that ...
0
votes
1answer
92 views

Implications of joining the active directory domain with the domain administrator

I always used the domain administrator to join the active directory domain, but I've never set up more than a few machines. Is that considered a security risk, is the end-user somehow able to obtain ...
0
votes
1answer
97 views

How to make an image shown only on a particular domain [closed]

Is there is a secure way that makes an image allowed to display within a particular domain, and preventing it to be shown on any other website?
0
votes
1answer
58 views

Information security point of view when registering a domain and chosing a TLD

How much does the choice of the domain registrar and the TLD impact the security of my information? I've learned that some registrars will require more personal information than others. I even had a ...
8
votes
4answers
10k views

A security warning when accessing a site through IP

When I go to https://www.schneier.com/, everything works normal. As soon as I access the same site using its IP address (66.33.204.254), I get a security warning (even if I write something like https:...
2
votes
0answers
629 views

How can I check if a domain is malicious? [closed]

I have started to look for domain names inside my traffic. So I am interested to identify which one is malicious or doing some malicious acitivites. I know by looking at online web-services such as ...
1
vote
1answer
53 views

Custom email domain with a third-party provider: security holes to watch out for? [closed]

If I'm switching to user@example.com emails and using a third-party email service provider that I trust (for example, Google Apps), what potential security threats do I need to secure my system ...
9
votes
1answer
318 views

Will enforcing this restriction on Domain Admins “break the network”?

Let's say we secure all servers in the domain.. Domain controllers allow RDP access only from jump servers Domain admins can't connect to non-dc servers And so forth This is all swell and should be ...
1
vote
0answers
47 views

WordPress site sends email from strange domains

I had a WordPress site with a security plugin configured to send me periodical database backups via email. This morning I noticed that I was receiving these emails as coming from two strange domains I ...
3
votes
1answer
248 views

Where should we maintain external (subcontractors) usernames and passwords?

We have three environments: Testing and development Preproduction Production In our company all technical people, including sysadmins and network administrators, are subcontractors so a lot of them (...
0
votes
1answer
2k views

How would I find an IP address range of a website or domain?

I would like to find the IP range of a few domains so I can block them in my firewall but I am not quite sure where to start.
2
votes
1answer
199 views

Which Extensible Provisioning Protocol (EPP) status-values provide sufficient protection against domain hijacking?

The Extensible Provisioning Protocol (EPP) as described in RFC 5730, can possibly be protective against domain hijacked. The protocol consists of the 17 following status-values as described in RFC ...
4
votes
2answers
726 views

How much can I trust domain registrars to honor Whois identity protection services?

Domain name registrars offer whois ID protection services. I do plan to use such a service. But as I'm a relative newbie to the domain name registration world, I don't know whether I can trust it. ...
3
votes
2answers
3k views

document.cookie and its scope

There is some basic confusion that I have. A non-suspecting victim visits a vulnerable website, vulnerable.com and logs in there. vulnerable.com, post login, sends back a response that has the ...
1
vote
1answer
137 views

Become domain admin by controlling an OU in Active Directory?

Some tools that draw links between objects in a Active Directory architecture, show that if we have an user who is administrator of an OU on which a domain administrator is also present, so he can ...
0
votes
1answer
152 views

How come domain resolves to another IP?

I tried to ping http://crashsafari.com in my CMD: Right there, it resolves http://crashsafari.com to 54.231.48.170 which is http://s3-website-us-east-1.amazonaws.com. But, http://crashsafari.com ...
0
votes
1answer
94 views

Why are the domains https.lk , ftp.lk and http.lk restricted on the Sri Lanka domain registry

I found http://nic.lk which is the domain registry for .lk domains (I am in Sri Lanka).I typed in https.lk and it said 'https.lk' Domain name you searched is restricted. Why is this done. Is it to ...
0
votes
2answers
149 views

How does an email provider verify my custom domain name?

I'm new to this and I've read a tutorial on this page: http://www.melyssagriffin.com/use-gmail-custom-domain/ The author of the tutorial wrote about her experiences of setting up a custom domain name ...
-2
votes
2answers
2k views

accessing site with different domain name, is it possible? [closed]

How can someone access my site with different domain name? i.e. example.com displayed mysite.com actually... (at least, i want for local PC purposes). or how to modify REQUESTS using browser? are ...
3
votes
2answers
91 views

Transferred domain to new registrar, ordered “id protection”, but my info is available in whois

Situation as per the title. How should I approach this to resolve it, am I wrong in thinking the ID protection should make my info not be visible? It's a .net domain. Edit - the visible details are ...
6
votes
2answers
2k views

Can I use my old SSL certificate with websites in subfolders?

We have a single domain SSL for a website that looks like this: www.website.company.com We are going to expand and do following: www.website.company.com www.website.company.com/dk www.website....
2
votes
1answer
2k views

Mail : non existent domain FROM field

I'm wondering if during the process of sending a message, the domain indicated in "from" field is checked? I know there is no integrity control of the from field, but I tried to send a message to an ...
1
vote
1answer
361 views

What can I do about a malicious site with a similar domain name?

I recently purchased a domain name (lets pretend it was generic.co), I checked to see what site was hosted on the domain close to mine (generic.com). The site loads a fake blue screen of death and ...
3
votes
3answers
5k views

Single Domain SSL Certificate vs Wildcard Certificate

Probably a rather odd question, but something that came to mind. Wildcard certificates are about 10 times more expensive than a single certificate. However with a single certificate, you can secure ...
7
votes
1answer
5k views

Impersonating a computer in a Windows domain

I've been trying to wrap my head around how computers are identified and granted access to a Windows domain. More specifically, I've been asking myself if whatever mechanism is involved really ...
2
votes
2answers
2k views

privacy - Which parts of URL is protected by HTTPS? [duplicate]

Assuming the website I visit uses HTTPS, which parts of the URL is protected from the eyes of my ISP? eg; https://subdomain.domain.com/path/file.php?param=value I know that domain.com (and probably ...
3
votes
2answers
119 views

Rerouting domains and the need for multiple SSL certificates

If a domain URL is registered with a .com (www.example.com) and we would like to re-route to this domain from a second domain name with a .com.tr (www.example.com.tr), is this possible? The .com ...
7
votes
1answer
1k views

Domain redirecting to my site without permission

I noticed that a domain that I don't own or know has been redirected to my site without my permission and has been affecting my SEO. I was able to block some of it by adding the following to the ....
4
votes
2answers
2k views

How should I block unwanted domain names? [duplicate]

I have noticed that someone pointed his domain to my dedicated IP address and now my website can be viewed using his domain name @ example.com . This can hurt my SE Traffic and SEO in many ways. How ...
3
votes
1answer
1k views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the quad-...
1
vote
1answer
117 views

Domain sale - Is it DNS hijacking?

I am using a desktop that has two Linux distros and Windows 7 installed, and a laptop with same installation. Both of them are in my home network. And sometimes when I try to visit some websites such ...
6
votes
1answer
4k views

How to reject e-mails spoofing your own domain targeting your employees at Office365?

One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
0
votes
3answers
3k views

Is it possible to get Network Domain from Client with PHP or Apache? [closed]

I'm working on a solution to identify client Network Domain or Workgroup in a private network. Based on it, I must change some access permissions. I can't do that through IP address because it isn't ...
1
vote
1answer
519 views

Browser response to SHA1 signed cert

Generated a IIS server certificate using my domain certificate authority (presumed to be an intermediate to the 'secret' root CA) via the Server Certificates -> Create Domain Certificate 'wizard'. ...
3
votes
3answers
7k views

How to make sure an API request is coming from a specific domain?

I'm opening up some API access to my site and my users are required to specify from which of their websites, such as example.com, they will make the API requests. I'm wondering if there's any way to ...
27
votes
3answers
49k views

Is it technically possible to configure two different SSL certificates for the same domain?

Say I have these URLs: https://example.org/ https://example.org/criticalpath I want the first one to be served with a domain validated commercial SSL certificate and the second one with an extended ...

1
2