Top all-time · #21505
Recon Wave
Company blog · reconwave.com/blog · on HN as yatralalalasecuritydata
Recon Wave is the company blog at reconwave.com, writing about security and data. Since 2024, 3 different Hacker News readers have linked it 11 times, most often “The Alarming Prevalence of Zone Transfers”. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked in a 'what are you working on' thread about a tool that monitors infrastructure for vulnerable or misconfigured systems. The comment does not discuss the writing itself.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Automatically discover internet-facing assets, monitor changes, and detect external risks with Recon Wave. No agents or internal access required.
Most-linked posts?
- The Alarming Prevalence of Zone Transfers2 people · 3 mentions · first linked 2024-10-21
- Storing RSA Private Keys in DNS TXT Records?2 people · 3 mentions · first linked 2024-09-23
- /2 people · 2 mentions · first linked 2024-09-30
What Hacker News says?
I'm building Recon Wave ( https://reconwave.com ) - we monitor companies online perimeter and let them know when something's wrong. Recon Wave basically finds and scans all their services - DNS, IPs, Apps, Ports - and notify customers when it breaks some policy (aka. "no ports than 443 should be open") or when some service is straight vulnerable. I'm former security engineer and I hated all that "critical reports" t…
Comment linking /
on “Ask HN: What are you working on? (March 2025)”Submitted Storing RSA Private Keys in DNS TXT Records? as a story · 15 points
HN discussionVery nice, I read one of your blog posts [0] and was pretty surprised, great read! Good luck on your journey. [0] https://reconwave.com/blog/post/storing-private-keys-in-txt-...
Comment linking /blog/post/storing-private-keys-in-txt-dns
on “Ask HN: What are you working on (September 2024)?”Submitted Global DNS State, Part 2 – DNS Centralisation as a story · 12 points
HN discussionDuring my 8 years of professional SWE career (mostly startups), I've never worked in a company that did not suffer data breach / was hacked. It was always dumb stuff like admin:admin or deploying vulnerable things and forgetting on them. After last one, I was done, left my job and started building Recon Wave [0]. I want to build tooling that will monitor your infra for you and find vulnerable / misconfigured / forgo…
Comment linking /
on “Ask HN: What are you working on (September 2024)?”Submitted The Alarming Prevalence of Zone Transfers as a story · 11 points
HN discussionSorry for a bit of self promo, but just to explain we run https://reconwave.com/ , basically EASM product but more focused on network/DNS/setup level. Finding all things about domains is one of the things that we do. And yes, it's very easy. There are many services like subdomainfinder - i.e. dnsdumpster and merklemap. We built our own as well on https://search.reconwave.com/ . But it's a side project and it does no…
Comment linking /
on “Ask HN: How did the internet discover my subdomain?”Submitted Storing RSA Private Keys in DNS TXT Records? as a story · 8 points
HN discussionZone transfers are super interesting topic. Thanks for mentioning that. It's basically the way how to get all DNS records a DNS server has. Interestingly in some countries this is illegal and in some this is considered best practice. Generally, enabled zone transfers is considered as misconfiguration and should be disabled. We did research on that few months back and found out that 8% of all global name servers have…
Comment linking /blog/post/alarming-prevalence-of-zone-transfers
on “Ask HN: How did the internet discover my subdomain?”Submitted Enumerating DNS zones using NSEC as a story · 4 points
HN discussionSubmitted The Alarming Prevalence of Zone Transfers as a story · 1 points
HN discussion