Our website uses cookies to improve your online experience. By continuing to use our website you consent to cookies being used according to our Privacy Policy.
OKNot already a member of the largest TMD experts network?
Sign up takes 1 minute
Sign up for an EXPERT account
if you want to offer your
services as Freelancer
Sign up for an CLIENT account to
start posting Job requests and
source Top talent on demand
Hi,
If anyone can help me, I am trying to guess the IP address behind the Cloudfront service for a pentesting. I tried using Shodan (to trace the SSL certificate) and also historical DNS info, but with no success.
Can you give me any other idea?
Hi Pablo, you could check if SSL certificate is not expired, and / or try to renew it, beside of that it’s better to check with cloud security team if you have correct rights to perform pentest.
Hi Robert, thank you for your support. I have already found this method, but there was no success. Obviously I have the rights to perform this pentest ;)
But I found a good idea. If you take a portion of body HTML code (for example, a unique ID such as Google Analytics uid) you can search it on Shodan, and perhaps you are lucky to find the server IP (or another websites using same uid). This has been helpful for me.
Happy to hear that you could solve it!
Haven't found a solution?
This will mark this comment as best reply and close your question.
Are you sure?
This will close your question without a Best reply.
Are you sure?
This will report this content as inappropiate to the moderators.
Are you sure?