Finding backends of most websites

Spread the love

Finding backends of most websites (+ patch)

Shodan
A simple way of finding a backend via utilizing a mass internet scanner.

Requires account
Link: https://shodan.io
Query: http.html:”site data”

Censys
A simple way of finding a backend via utilizing a mass internet scanner.

Link: https://censys.io/ipv4
Query: site data

Subdomain Scanning
Finding subdomains that skip the waf.

Link: https://subdomainfinder.c99.nl
Query: domain.com

Cloudflare
Creating an account, and adding the domain to your account. They will scan the domain for you, finding DNS.

Link: https://dash.cloudflare.com

Patching these methods
This is a very easy fix. Just only allow your waf to connect to the web app port, normally 80. If you use cloudflare, only allow cloudflare IPs to access port 80, and there isnt a way they could get the backend through scanning.

Enjoy

Leave a Comment

Your email address will not be published. Required fields are marked *

error: Content is protected !!