DoD Hunters

Welcome!

  • This topic has 2 replies, 2 voices, and was last updated 9 months ago by Max.
Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • Max
    Participant

    Hi all,
    just wanted to start the forum a bit.

    I would love to do some recon together and
    share some domains to hunt on for the dod.
    Are you up to this?
    We could create a shared list of domains, directories, techstack etc.

    May 1, 2022 at 12:04 pm #5197
    Gal Nagli
    Keymaster

    I found a lot of XSS in the past on the DoD domains which doesn’t end in “.mil”, I would check those.

    May 1, 2022 at 1:54 pm #5234
    Max
    Participant

    I also noticed that the DoD has a really mixed and old tech stack.
    But a google dork like site:*.mil with ext:jsf or jsp works great to find some outdated Java servlets.

    May 1, 2022 at 6:29 pm #5245
  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.

Ready to join the community?

Better Together, we are waiting for you!

Register Now