3 ms·
Can some of these tools and methods be considered unauthorized access to servers? For instance, subdomain enumeration can often accessing an URL that isn’t mean
by altdataseller 5y ago
Can some of these tools and methods be considered unauthorized access to servers? For instance, subdomain enumeration can often accessing an URL that isn’t meant to be accessed by the public and isn’t linked anywhere.
- rovr138 5y agoI wonder how this is affected by the last ruling, “US Supreme Court Restricts Scope of Computer Fraud and Abuse Act [pdf]” - https://news.ycombinator.com/item?id=27382752 https://news.ycombinator.com/item?id=27382752 - from a couple days ago. If they don’t block access to the service, what rights do you have to read headers sent from the server?
- bigiain 5y agoIf I enumerate your sub domains using Google or Cloudflare’s public dns servers, what unauthorised access took place? I don’t need to make an http(s) request to find out if a sub domain exists (except perhaps when you’re using wildcard sub domains).