5 ms·
(sub)domain takeover is one of the more common security issues affecting organisations, and bounty programmes often pay-out for these issues. https://www.hacke
by Daviey 6y ago
(sub)domain takeover is one of the more common security issues affecting organisations, and bounty programmes often pay-out for these issues.
https://www.hackerone.com/blog/Guide-Subdomain-Takeovers https://www.hackerone.com/blog/Guide-Subdomain-Takeovers
https://github.com/EdOverflow/can-i-take-over-xyz https://github.com/EdOverflow/can-i-take-over-xyz
- cjbprime 6y agoAnd to explain the severity: if you control a subdomain, you're potentially getting trusted access to cookies, cross-origin requests, and so on.
- cpach 6y agoThis whas not subdomain takeover though.
- Daviey 6y agoNo, I know - but the impact is the same. I've also had people abandon domains onto my nameservers and keep renewing them for years, which is similar. They are now a sort of pseudo-controlled domain now.