🔍 A platform automatically monitoring your infrastructure ⭐ No installation, no internal access, no setup 🕵️ We always know all your assets - same as hackers
Czechia
Joined May 2024
- Tweets19
- Following62
- Followers32
- Likes15
Only 2 DNS providers control 33% of all apex domains.
This gives us an idea about the scale when one of the big tech players have a global outage.
Do you know all the DNS providers you or your company uses?
Would you know if a malicious actor added a new TXT record to your DNS? This silent move could compromise your organisation.
At Recon Wave, we track all infrastructure changes, including DNS!
Contact us for a free trial—no setup needed, we already have all the data!
Recon Wave retweeted
Do you know about quite old (yet still sometimes working) technique to enumerate DNS zones using NSEC records?
I don't blame you, let me show you, it's fun 🧵
Recon Wave retweeted
People put really bizarre stuff to DNS as TXT records. Let me show you some of the best ones that I found so far 🧵
Recon Wave retweeted
Open DNS zone transfers are 90s thing, right? Well our experiment shows that a shocking 8% of all global nameservers have still zone transfers publicly open, letting anyone dump entire zone records
1/4 🧵
Our team has recently discovered a scary number of RSA private keys publicly stored in DNS TXT records.
To our surprise, there is a special case where it actually makes sense! 🤯
Find out more in our latest blogpost!
reconwave.com/blog/post/stor…
We're excited to announce the launch of Recon Wave Search!
More than 10 billion of DNS records unlocked for security researchers, pen-testers and defenders. 🎉
One of the biggest reverse DNS database at your fingertips! See part of your OSINT fingerprint!
#ridereconwave
Recon Wave retweeted
My first thought was "Wow malware is scraping images". Then I opened iPhoto and typed a few words that appeared in photos. Like "Stream Deck" pulled up a picture of my desk.
My guess is malware is just reading from the OS's photo index database and not doing any scraping at all. Which makes this more scary as if you are someone that takes a picture of your Ledger recovery phrase (or passwords), then it could be stolen in a couple-seconds if anyone ever has your phone.
All it takes is handing your phone to someone to take a picture, them opening the photo app, and searching "Recovery Phrase" to pull up the ledger sheet. No fancy malware needed.
I think it's important to emphasize how low-tech this hack can be as people think they are too small for sophisticated malware.
Recon Wave retweeted
𝗢𝗻𝗹𝗶𝗻𝗲, 𝗵𝗮𝗻𝗱𝘀-𝗼𝗻, 𝗽𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹, 𝗮𝗻𝗱 𝗳𝗿𝗲𝗲!
CTU's "Introduction to Security" Class opens online for free! Join us and register for free. Starting on Sep 26th. #cybersec #infosec #blueteam #redteam
stratosphereips.org/blog/202…
Recon Wave retweeted
HAs anyone worked out why Amazon has been issuing ssl certs for dyingbirds[.]com every second?
b7b7a13b51f467788d5d0f1b8e98f781713557967877[.]amdv[.]dyingbirds[.]com
san[.]b7b7a13b51f467788d5d0f1b8e98f781713557967877[.]amdv[.]dyingbirds[.]com
Have you also not heard about DNS zone enumeration using NSEC records before?
Check out our latest blogpost about this publicly less known but still relevant technique 🔍🔒
reconwave.com/blog/post/enum…
#dns #recon #enumeration
Recon Wave retweeted
Web programmers seem to have no idea just how fast computers have become. The vast majority of all SaaS apps ever made could easily run on a single, beefy beast. Main reason to add multiple machines is for redundancy, and even that is something you can put off for ages.
The CPU % on my VPS server even went down not up since @lexfridman podcast and @elonmusk tweet
While traffic more than tripled and revenue doubled
Not serverless, not edge, not kubernetes, not auto scaling
Just 1 simple VPS for all my sites
Thx to @DanielLockyer my DevOps guy
Recon Wave retweeted
Types of DNS Attacks
Credit @xmodulo
#infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips
