Guía en español para auditar pasivamente la superficie externa de un dominio

·4 views

Un artículo de DEV Community presenta el "Método CROX Sec", una guía para evaluar la exposición pública de un dominio sin realizar pruebas intrusivas. Explica cómo enumerar subdominios mediante registros de Certificate Transparency y verificar cuáles siguen activos. También describe cómo revisar cabeceras de seguridad HTTP, configuraciones de correo como SPF, DKIM y DMARC, y rutas que suelen estar expuestas. Por último, detalla la verificación de certificados TLS y cifrados con nmap, y propone registrar los hallazgos con severidad y correcciones concretas.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Researchers test AI agent swarms in Minecraft and Mindustry games

A project shared on Hacker News reports that its team ran groups of AI agents, known as swarms, inside the games Minecraft and Mindustry. The work is hosted on a Y Combinator Labs project page, which serves as the primary source for the experiment. The available information is limited, with the Hacker News thread showing only four points and no comments at the time of reporting. Details on the agents' goals, methods, and results are not included in the source material. Further specifics would need to be drawn from the project page itself.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Arkham Intelligence Links Wallet Cluster to Alleged $5.6B Theft from Binance

A Hacker News post links to an Arkham Intelligence explorer entity page associated with a reported $5.6 billion theft from the cryptocurrency exchange Binance. The source material is limited to a URL and a brief discussion thread, with no accompanying article text describing the incident in detail. The page is tagged as 'Binance-hacker-1029', indicating the entity has been labeled by blockchain analytics as linked to the alleged theft. The post gained 12 points and one comment on Hacker News, so the claim has not been independently detailed in the available reporting. Further verification from Binance or established news outlets would be needed to confirm the amount, timing, and circumstances.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Reports claim over $5B drained from Binance in apparent hack

A post shared on X claims that more than $5 billion was drained from Binance in what appears to be a hack. The source material is a brief social media link with no accompanying article text, so the details remain unverified. No official statement from Binance confirming the incident was included in the provided material. The claim gained some attention on Hacker News, where it received 17 points and no comments at the time of capture. Further confirmation from Binance or reliable reporting would be needed to establish the scope and cause of the alleged breach.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Sylphide OS Aims to Be a General-Purpose OS for Microcontroller Computers

A new project called Sylphide OS has been shared on Hacker News, pointing to a dedicated project page. The operating system is described as general-purpose and designed for computers built around microcontrollers. The source material is limited to a link and a brief discussion thread, with only one comment and seven points at the time of posting. Further technical details about its features, supported hardware, and development status are not available in the provided text.

0 comments Read more at Hacker News