CC is one of many businesses, and edge exposure

R

RiotSecurity

New Member

• Oct 6, 2013

• #1

I just couldn't help myself...

http://mohawk.colocrossing.com/

http://bw.colocrossing.com/

http://molten.colocrossing.com/

http://files.colocrossing.com/ (IIS 7)

db1.colocrossing.com

www.myserverpanel.colocrossing.com

web.colocrossing.com

smokeping.dal.colocrossing.com

freedom.colocrossing.com

independence.colocrossing.com

oldbilling.colocrossing.com

wiki.colocrossing.com

portal1a.colocrossing.com

portal1b.colocrossing.com

mail1a.colocrossing.com

mail1b.colocrossing.com

backup1a.colocrossing.com

edge1b.colocrossing.com :  198.46.12*.*
edge1a.colocrossing.com : 198.46.12*.*

Full log: http://pastebin.com/5EzYHaFN

I simply cannot...

 

Last edited by a moderator: Oct 6, 2013

Jack

Active Member

• Oct 6, 2013

• #2

http://molten.colocrossing.com/ is [email protected]

 

R

RiotSecurity

New Member

• Oct 6, 2013

• #3

Jack said:

http://molten.colocrossing.com/ is [email protected]

Click to expand...

Yep.

 

Jack

Active Member

• Oct 6, 2013

• #4

Quite possible the IP was reassigned and the A record hasn't been removed though.

 

R

Reece-DM

New Member

Verified Provider

• Oct 6, 2013

• #5

Jack said:

Quite possible the IP was reassigned and the A record hasn't been removed though.

Click to expand...

That's the perfect excuse = )

 

R

RiotSecurity

New Member

• Oct 6, 2013

• #6

Reece said:

That's the perfect excuse = )

Click to expand...

Yep, watch them use that excuse.

 

jarland

The ocean is digital

• Oct 6, 2013

• #7

Newbie question but... What method did you use to pull the whole zone like that? I'd like to copy mine from a registrar that won't enable transfer is why I ask.

 

R

RiotSecurity

New Member

• Oct 6, 2013

• #8

jarland said:

Newbie question but... What method did you use to pull the whole zone like that? I'd like to copy mine from a registrar that won't enable transfer is why I ask.

Click to expand...

Method: DNS Transfer Zone

 

Last edited by a moderator: Oct 6, 2013

DamienSB

Active Member

Verified Provider

• Oct 6, 2013

• #9

RiotSecurity said:

Method: DNS Transfer Zone

Click to expand...

I am pretty sure he is asking what command to use.

 

MannDude

Just a dude

vpsBoard Founder

Moderator

• Oct 6, 2013

• #10

What does this mean? Explain it to me like i'm five.

 

jarland

The ocean is digital

• Oct 6, 2013

• #11

RiotSecurity said:

Method: DNS Transfer Zone

Click to expand...

Oh darn they had zone transfer on. Which was clearly genius on their part. Total fail. If you ever figure out how to pull a zone file without AXFR hit me up.

 

jarland

The ocean is digital

• Oct 6, 2013

• #12

MannDude said:

What does this mean? Explain it to me like i'm five.

Click to expand...

Means they probably have recursion on too. They're bad at running a DNS server.

 

R

RiotSecurity

New Member

• Oct 6, 2013

• #13

DamienSB said:

I am pretty sure he is asking what command to use.

Click to expand...

perl fierce.pl -dns colocrossing.com

Yes, I'm that good.

 

D

Deleted

Jail

• Oct 7, 2013

• #14

jarland said:

Means they probably have recursion on too. They're bad at running a DNS server.

Click to expand...

No. I wasn't /that/ stupid.

gary@exar-kun:~$ DOMAIN=colocrossing.com ; for i in `whois $DOMAIN | grep "^Name Server:" | awk '{print $3}'` ; do dig +short www.google.com @$i ; done