Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
TheHappyOddish
on Sept 16, 2023
|
parent
|
context
|
favorite
| on:
Subdomain.center – discover all subdomains for a d...
Hardly "all subdomains". Unless it's doing an AXFR of my zone file (unlikely), this isn't possible.
It's a scraper/guesser, using cert transparency, common names, etc. Cute toy, but false claims.
panki27
on Sept 16, 2023
[–]
You are correct, I've tested it with my own domains. It does not know the ones running with a wildcard certificate for example.
wlonkly
on Sept 17, 2023
|
parent
[–]
It knows many of the wildcard-served customer subdomains of one of my former employers. (They're probably just scraped from search or something, but a wildcard is not sufficient to prevent discovery.)
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
It's a scraper/guesser, using cert transparency, common names, etc. Cute toy, but false claims.