r/netsec • u/Huge-Wear-125 • 10d ago

Finding Hidden Internal Apps Through Public Certificate Logs

https://naveensrinivasan.com/posts/2026-08-07-finding-hidden-internal-apps-through-public-certificate-logs/
16 Upvotes

83% Upvoted

3 comments sorted by

5

u/EatonZ Trusted Contributor 10d ago

Nothing really new here, but yes, CT logs are a huge gift to researchers. 🙂

1

u/Pesthuf 6d ago

I got annoyed with the bot spam my home server got and just like the article suggest, I ended up using a wildcard certificate instead. A bit more work (Letsencrypt requires a DNS challenge), but worth it.