Notes

• I will change the name of the company I will talk about and call it Kings-Landing.
• There is a short version of the story (TL;DR) & take away sections at the end of the write-up if you want to save yourself 7minutes || don’t have time for my jokes :)

I don’t like the introductions, so I will get into the point directly.

HTTP history

After a couple of hours of hunting on the main domain of Kings-Landing didn’t reveal anything interesting, it was time for moving to the next sub-domain in the scope.

I’ve built a habit of taking a quick look at the burp HTTP history before moving on from a web app to another. …