3 ms·
Teams has its issues, but this is a click bait article > First, the attacker needs to issue a certificate for the compromised sub-domains.
by harikb 7y ago
Teams has its issues, but this is a click bait article
> First, the attacker needs to issue a certificate for the compromised sub-domains.
- nogabebop23 7y agoYes - can someone shed some light on how someone would (a) compromise a subdmomain and (b) get a cert issued? This seems like you would need to be internal to the org, not the 3rd party exploit the article is trying to push?
- wunderwuzzi23 7y agoIf you are able to host a file on the domain at a specific location, then you can use Let's Encrypt for instance. Certbot uses ones ability to present a resource (aka acme-challenge) on the domain for issuing certs (either via http or dns txt record). More info: https://certbot.eff.org/docs/using.html#changing-a-certificate-s-domains https://certbot.eff.org/docs/using.html#changing-a-certifica...
- joenathanone 7y agoYes, but how would you host a file on the sub domain?
- Bnshsysjab 7y agoPresumably the ability to serve HTTP on ports 80 and 443 would be sufficient.