Search the Community
Showing results for tags 'hosted'.
-
DNSTake: A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAIL error. This allows an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain. Workflow DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it’s vulnerable to be taken over. More or less like this in form of a diagram. [hide][Hidden Content]]
-
Itty bitty is an experimental project by Nicholas Jitkoff, former Google designer and current vice president of design at Dropbox, which allows you to generate micro web sites hosted directly on your own links. Users will be able to add plain text and other types of characters to generate their own micro-web sites, thus having their own links that they can later share on any other platform. Basically, its operation consists in generating the URL using the Lempel-Ziv-Markov compression algorithm, so that the URLs are not much longer, as the contents are added to the micro website. The developer of the project, open source, whose source code is on the GitHub platform, points out that micro websites do not need a server to host them, they are private when nothing is sent or stored on the server, and it is easy to share, both as a link itself and as a QR code. Itty bitty is the product that has been placed first in today through the Product Hunt platform. Now it only remains to see what uses will make the users of this curious project, although the developer already proposes some ideas: write poetry, create an app, omit character limitation (alluding to platforms with Twitter), or even for users can be expressed in ASCII. [Hidden Content]