Other nomination
Hacking Intranets Via Brute Force
Scrapes the Alexa 500 for intranet.* and internal.* hostnames and finds 162 live split-horizon DNS entries exposing internal IPs. Because intranet logins are the NT domain names that match public email addresses, the listed hosts can be brute-forced directly. RSnake's own follow-up, lost with the comment thread, confirmed seven returning 401.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.