diff --git a/content/post/sdh.adoc b/content/post/sdh.adoc index 0896126..5c7a563 100644 --- a/content/post/sdh.adoc +++ b/content/post/sdh.adoc @@ -108,7 +108,7 @@ NOTE: I own `rmoff.info` so it's up to me what I do with it, but I'm pretty sure This means that anyone who hits the GitHub Pages web servers (which we've seen above is fronted by that block of four IP addresses) asking for `spammy-crap.rmoff.info` is going to get served the contents of https://github.com/rmoff/sdh-test[the repository that I created]. -Let's try it: +Let's try it out and go click on 🔗 http://spammy-crap.rmoff.info[spammy-crap.rmoff.info] image::/images/2024/01/sdh.webp[] @@ -132,6 +132,7 @@ And to recap, all that I needed to do to hijack subdomains was: NOTE: My thanks to https://www.linkedin.com/in/oliverhookins/[Oliver Hookins] for his rapid help in diagnosing and explaining this issue. -_I have, obviously, removed the wildcard DNS record from `rmoff.info` before publishing this, so don't even try 😝_ +_I have, obviously, removed the wildcard DNS record from `rmoff.info` before publishing this, so don't even try 😝_ \ +_I left in place an A record just for `spammy-crap` so that you can see the domain->GitHub Pages resolution in practice._ image::/images/2024/01/dns0.webp[Wait, It's All DNS? Always Has Been] \ No newline at end of file