Todd Rundell’s Post

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Get a free tool to #fixpf: https://lnkd.in/g6mhvxwY Schedule online or in person today! https://lnkd.in/g6mhvxwY Read to learn more: https://lnkd.in/gNg938vX Listen to learn more: https://lnkd.in/ggGdWHdS #heelpain #FixPF

Subdominator: Open-source tool for detecting subdomain takeovers Subdominator features: Service fingerprint accuracy: All of them have been vetted and consolidated, so they are all accurate. This was a big issue in other tools. Fingerprint count: The tool has 97 service fingerprints. Other most popular tools have less than 50. Nested DNS support: Subdominator will check the entire CNAME chain until it finds an A record, making sure nothing is missed (None of the other tools went past the first CNAME). Alternate DNS records: The fingerprints support A and AAAA record matching, finding takeovers that have never been detectable before. Speed: The tool runs ~8x faster than existing tools, a test on ~100,000 records took 19 minutes and 2.5 hours for every other tool (give or take a few minutes for each tool). https://lnkd.in/gQ-xeHQD #applicationsecurity #ethicalhacking #informationsecurity

The different names of the tool does not change your knowledge of how to use it!

Really enjoyable box. XSS to obtain administrative cookies to abusing sudo to gain administrative privileges as root. Learned a few new tricks with this one. On to the next!