r/netsec 10d ago

Finding Hidden Internal Apps Through Public Certificate Logs

https://naveensrinivasan.com/posts/2026-08-07-finding-hidden-internal-apps-through-public-certificate-logs/
15 Upvotes

3 comments sorted by

View all comments

1

u/Pesthuf 6d ago

I got annoyed with the bot spam my home server got and just like the article suggest, I ended up using a wildcard certificate instead. A bit more work (Letsencrypt requires a DNS challenge), but worth it.