Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Analyzing DNS TXT Records to Fingerprint Online Service Providers

netspi.com | blog | #attack-surface | #osint | #powershell | #recon | #fingerprinting | #dns

Summary

Analyzes leftover domain-validation TXT records across a million domains to fingerprint the online service providers a company uses, releasing a PowerShell script to automate the reconnaissance.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Anonymously Enumerating Azure Services
Karl Fosaaen releases a script for anonymous Azure service enumeration, brute forcing DNS across azurewebsites.net, cloudapp.net, and blob.core.windows.net to map a target's public Azure footprint.
blog · netspi.com
NetblockTool: The Easy Way to Find IP Addresses Owned by a Company
NetblockTool is a Python tool that automates netblock discovery, scraping Google dorks, ARIN, and IPinfo to build a confidence-ranked list of IP ranges owned by a company and its subsidiaries.
blog · netspi.com
Attacking Federated Skype for Business with PowerShell
Examines security issues in federated Skype for Business, showing how external domains can validate email addresses, read availability and out-of-office status, and deliver phishing messages.
blog · yeswehack.com
Recon Series #2: Subdomain enumeration – expand attack surfaces with active, passive techniques
Recon series #2 on subdomain enumeration: passive techniques via Censys, Shodan and SecurityTrails, Google dorking, DNS brute-forcing and vhost fuzzing, demonstrated on the ATG bug bounty program.
blog · netspi.com
I’m Just Asking Questions: Social Engineering as a Reporter
A social engineering engagement posed as a journalist seeking comment on an anonymous tip about hazardous waste dumping, showing how OSINT-grounded pretexts lower well-trained executives' guard.
blog · netspi.com
We Know What You Did (in Azure) Last Summer
NetSPI's DEF CON 33 talk shows how Azure resources supporting Entra ID authentication expose tenant IDs, letting attackers map cloud resources back to specific organizations at scale.
back