3 ms·
Even if it doesn't have a public ip address, its existence can be discovered if an organization's DNS isn't separated into public and private. Then there are a
by extra88 10y ago
Even if it doesn't have a public ip address, its existence can be discovered if an organization's DNS isn't separated into public and private.
Then there are all the ways an employee can inadvertently or intentionally make its existence public.
- chris_wot 10y agoI know. :-) all those people downvoting... and not one of them typed in the following Google search: https://www.google.com.au/search?q=discovering+internal+web+applications https://www.google.com.au/search?q=discovering+internal+web+... Leading to gems like this: https://www.verisgroup.com/2014/07/15/internal-web-application-discovery-during-post-exploitation/ https://www.verisgroup.com/2014/07/15/internal-web-applicati... And this: https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&lpg=PA429&dq=discovering+internal+web+applications&source=bl&ots=vduDFYAnwx&sig=DZ7VsIyiWwkK71u78CUb129g0fk&hl=en&sa=X&ved=0ahUKEwiGi-7kx_PPAhVMVWMKHVeoCEkQ6AEIGjAA#v=onepage&q=discovering%20internal%20web%20applications&f=false https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&l... Or even this: http://www.pentest-standard.org/index.php/Intelligence_Gathering http://www.pentest-standard.org/index.php/Intelligence_Gathe...