3 ms·
it may utilize a few techniques as there are subdomains I am aware of that've never been published other than in the zone config on my registrar that are return
by out-of-ideas 3y ago
it may utilize a few techniques as there are subdomains I am aware of that've never been published other than in the zone config on my registrar that are returned from api query
- pbhjpbhj 3y agoI use Siteground and it has a staging server that AFAIK hasn't been used for at least 6 years ... Nothing at the host has any details of that, archive.org doesn't have it in their site URLs, it's not in DNS records, not in .well-known, it was a transient test years ago ... really curious, must be historic data from somewhere?
- RockRobotRock 3y agoI use Cloudflare for DNS and the only ones it found had LE certs. It's not doing a simple brute-force on common names, I don't think. Otherwise it probably would have found a lot more. Curious about how it works.