jmarya/knowledge
jmarya/knowledge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix

Browse source
This commit is contained in:
JMARyA 2024-05-27 14:42:05 +02:00
parent 3ebe646af0
commit b0f2a6e1d7
Signed by: jmarya
GPG key ID: 901B2ADDF27C2263
3 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
technology/hacking/web-check.md
View file

@ -2,7 +2,7 @@
obj: application
repo: https://github.com/Lissy93/web-check
website: https://web-check.xyz
rev: 2024-03-26
rev: 2024-05-27
---
# web-check
@ -169,10 +169,10 @@ Websites can include certain meta tags, that tell search engines and social medi
Adding this data to your site will boost SEO, and as an OSINT researcher it can be useful to understand how a given web app describes itself
### Email Configuration
DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC is an [email](../internet/eMail.md) authentication protocol that works with SPF and DKIM to prevent [email](../internet/eMail.md) spoofing and phishing. It allows [domain](../internet/Domain.md) owners to specify how to handle unauthenticated mail via a published policy in [DNS](../internet/DNS.md), and provides a way for receiving mail servers to send feedback about [emails](../../../Life/eMails.md)' compliance to the sender. BIMI (Brand Indicators for Message Identification): BIMI is an emerging [email](../internet/eMail.md) standard that enables organizations to display a logo in their customers' [email](../internet/eMail.md) clients automatically. BIMI ties the logo to the [domain](../internet/Domain.md)'s DMARC record, providing another level of visual assurance to recipients that the [email](../internet/eMail.md) is legitimate. DKIM (DomainKeys Identified Mail): DKIM is an [email](../internet/eMail.md) security standard designed to make sure that messages were not altered in transit between the sending and recipient servers. It uses digital signatures linked to the [domain](../internet/Domain.md) of the sender to verify the sender and ensure message integrity. SPF (Sender Policy Framework): SPF is an [email](../internet/eMail.md) authentication method designed to prevent [email](../internet/eMail.md) spoofing. It specifies which mail servers are authorized to send [email](../internet/eMail.md) on behalf of a [domain](../internet/Domain.md) by creating a [DNS](../internet/DNS.md) record. This helps protect against spam by providing a way for receiving mail servers to check that incoming mail from a [domain](../internet/Domain.md) comes from a host authorized by that [domain](../internet/Domain.md)'s administrators.
DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC is an [email](../internet/eMail.md) authentication protocol that works with SPF and DKIM to prevent [email](../internet/eMail.md) spoofing and phishing. It allows [domain](../internet/Domain.md) owners to specify how to handle unauthenticated mail via a published policy in [DNS](../internet/DNS.md), and provides a way for receiving mail servers to send feedback about [emails](../internet/eMail.md)' compliance to the sender. BIMI (Brand Indicators for Message Identification): BIMI is an emerging [email](../internet/eMail.md) standard that enables organizations to display a logo in their customers' [email](../internet/eMail.md) clients automatically. BIMI ties the logo to the [domain](../internet/Domain.md)'s DMARC record, providing another level of visual assurance to recipients that the [email](../internet/eMail.md) is legitimate. DKIM (DomainKeys Identified Mail): DKIM is an [email](../internet/eMail.md) security standard designed to make sure that messages were not altered in transit between the sending and recipient servers. It uses digital signatures linked to the [domain](../internet/Domain.md) of the sender to verify the sender and ensure message integrity. SPF (Sender Policy Framework): SPF is an [email](../internet/eMail.md) authentication method designed to prevent [email](../internet/eMail.md) spoofing. It specifies which mail servers are authorized to send [email](../internet/eMail.md) on behalf of a [domain](../internet/Domain.md) by creating a [DNS](../internet/DNS.md) record. This helps protect against spam by providing a way for receiving mail servers to check that incoming mail from a [domain](../internet/Domain.md) comes from a host authorized by that [domain](../internet/Domain.md)'s administrators.
**Use Cases**:
This information is helpful for researchers as it helps assess a [domain](../internet/Domain.md)'s [email](../internet/eMail.md) security posture, uncover potential vulnerabilities, and verify the legitimacy of [emails](../../../Life/eMails.md) for phishing detection. These details can also provide insight into the hosting environment, potential service providers, and the configuration patterns of a target organization, assisting in investigative efforts.
This information is helpful for researchers as it helps assess a [domain](../internet/Domain.md)'s [email](../internet/eMail.md) security posture, uncover potential vulnerabilities, and verify the legitimacy of [emails](../internet/eMail.md) for phishing detection. These details can also provide insight into the hosting environment, potential service providers, and the configuration patterns of a target organization, assisting in investigative efforts.
### Firewall Detection
A WAF or web application firewall helps protect web applications by filtering and monitoring [HTTP](../internet/HTTP.md) traffic between a web application and the Internet. It typically protects web applications from attacks such as cross-site forgery, cross-site-scripting (XSS), file inclusion, and [SQL](../dev/programming/languages/SQL.md) injection, among others.