3 ms·
If it has a public IP address, it can be discovered.
by chris_wot 10y ago
If it has a public IP address, it can be discovered.
- extra88 10y agoEven if it doesn't have a public ip address, its existence can be discovered if an organization's DNS isn't separated into public and private. Then there are all the ways an employee can inadvertently or intentionally make its existence public.
- chris_wot 10y agoI know. :-) all those people downvoting... and not one of them typed in the following Google search: https://www.google.com.au/search?q=discovering+internal+web+applications https://www.google.com.au/search?q=discovering+internal+web+... Leading to gems like this: https://www.verisgroup.com/2014/07/15/internal-web-application-discovery-during-post-exploitation/ https://www.verisgroup.com/2014/07/15/internal-web-applicati... And this: https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&lpg=PA429&dq=discovering+internal+web+applications&source=bl&ots=vduDFYAnwx&sig=DZ7VsIyiWwkK71u78CUb129g0fk&hl=en&sa=X&ved=0ahUKEwiGi-7kx_PPAhVMVWMKHVeoCEkQ6AEIGjAA#v=onepage&q=discovering%20internal%20web%20applications&f=false https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&l... Or even this: http://www.pentest-standard.org/index.php/Intelligence_Gathering http://www.pentest-standard.org/index.php/Intelligence_Gathe...