Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Discovering Domains via a Time-Correlation Attack on Certificate Transparency

Summary

A new recon technique: since servers renew all TLS certs at once, time-correlating Certificate Transparency logs reveals every domain a server uses — handy for threat intel and bug bounty.
Published
Collected

original ↗

Related coverage

back