kazet

Notifying if no HTTP Host header yields directory listing

4

### Template / PR Information At CERT PL we detected some HTTP servers where a request with no Host header returns directory listing. ### Template Validation I've validated this template...

Hello, The RFC says that: > A Report Receiver that is willing to receive reports for any domain can use a wildcard DNS record. For example, a TXT resource record...

Currently, to have periodic scanning, you need to periodically call the API and add targets. Can it be done easier?

Hello, I noticed the license is missing. Would it be possible to add one? Of course a permissive one ;)

Removing one case of FPs

1

### Template / PR Information If a website gave access to /test.txt but didn't gave access to / (regardless of X-Forwarded-For), this wouldn't be a 403 bypass, but would be...

Wildcard DMARC report destination

2

Hello, The RFC says that: > A Report Receiver that is willing to receive reports for any domain can use a wildcard DNS record. For example, a TXT resource record...