Discovering Domains via a Time-Correlation Attack on Certificate Transparency
swarm.ptsecurity.com | research | #bug-bounty | #threat-intelligence | #reconnaissance | #tls | #certificate-transparency
Summary
A new recon technique: since servers renew all TLS certs at once, time-correlating Certificate Transparency logs reveals every domain a server uses — handy for threat intel and bug bounty.
- Published
- Collected
Skip to content