3 ms·

>It's an internal web app -- outsiders won't be able to discover where it is (@biosshadow) explain

• chris_wot 10y ago
  If it has a public IP address, it can be discovered.
  • extra88 10y ago
    Even if it doesn't have a public ip address, its existence can be discovered if an organization's DNS isn't separated into public and private. Then there are all the ways an employee can inadvertently or intentionally make its existence public.
    • chris_wot 10y ago
      I know. :-) all those people downvoting... and not one of them typed in the following Google search: https://www.google.com.au/search?q=discovering+internal+web+applications https://www.google.com.au/search?q=discovering+internal+web+... Leading to gems like this: https://www.verisgroup.com/2014/07/15/internal-web-application-discovery-during-post-exploitation/ https://www.verisgroup.com/2014/07/15/internal-web-applicati... And this: https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&lpg=PA429&dq=discovering+internal+web+applications&source=bl&ots=vduDFYAnwx&sig=DZ7VsIyiWwkK71u78CUb129g0fk&hl=en&sa=X&ved=0ahUKEwiGi-7kx_PPAhVMVWMKHVeoCEkQ6AEIGjAA#v=onepage&q=discovering%20internal%20web%20applications&f=false https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&l... Or even this: http://www.pentest-standard.org/index.php/Intelligence_Gathering http://www.pentest-standard.org/index.php/Intelligence_Gathe...