Tags: recon web 

Rating:

amass -d military-grade-secrets.dev
secret-storage.military-grade-secrets.dev
now.under.even-more-militarygrade.pw.military-grade-secrets.dev

OWASP Amass v2.9.10                               https://github.com/OWASP/Amass
--------------------------------------------------------------------------------
2 names discovered - cert: 2
--------------------------------------------------------------------------------
ASN: 15169 - GOOGLE - Google LLC, US
 216.58.211.0/24    2    Subdomain Name(s)
 2a00:1450:4010::/48 2    Subdomain Name(s)

curl https://secret-storage.military-grade-secrets.dev
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>302 Moved</TITLE></HEAD><BODY>
<H1>302 Moved</H1>
The document has moved
<A HREF="https://forget-me-not.even-more-militarygrade.pw">here</A>.
</BODY></HTML>

http://web.archive.org/web/20190311064556/http://forget-me-not.even-more-militarygrade.pw/

Original writeup (https://getinside.cloud/posts/defcon2019.html).