To CNAME or not to CNAME: That is the (Enumeration) Question
Article originally co-authored with Klesti Fetiu on Exaforce Substack: https://theforcemultiplier.substack.com/p/to-cname-or-not-to-cname-that-is
Introduction
Azure Endpoints
| **Nr** | **Endpoint** | **Suffixes** |
| --- | --- | --- |
| 1 | azurewebsites.net | App Services |
| 2 | scm.azurewebsites.net | App Services Management |
| 3 | p.azurewebsites.net | App Services |
| 4 | cloudapp.net | App Services |
| 5 | file.core.windows.net | Storage Accounts: Files |
| 6 | blob.core.windows.net | Storage Accounts: Blobs |
| 7 | queue.core.windows.net | Storage Accounts: Queues |
| 8 | table.core.windows.net | Storage Accounts - Tables |
| 9 | redis.cache.windows.net | Databases - Redis |
| 10 | documents.azure.com | Databases - Cosmos DB |
| 11 | database.windows.net | Databases - MSSQL |
| 12 | vault.azure.net | Key Vaults |
| 13 | onmicrosoft.com | Microsoft Hosted Domain |
| 14 | mail.protection.outlook.com | Email |
| 15 | sharepoint.com | SharePoint |
| 16 | azureedge.net | CDN |
| 17 | search.windows.net | Search Appliance |
| 18 | azure-api.net | API Services |Private Links
US Gov and China Cloud
Globally Unique Endpoints That Cannot Be Enumerated
Conclusion
PreviousFeeding the worm a soft cloudy bun: The second coming of Shai-HuludNextGhost in the Script: Impersonating Google App Script projects for stealthy persistence
Last updated