can-i-take-over-xyz
can-i-take-over-xyz copied to clipboard
EdOverflow
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
## Service name GetResponse - https://www.getresponse.com/ ## Vulnerable domain which can be takeover  Fingerprint: "Cette landing page n'est plus disponible" (FR) ## Steps to takeover 1. Register an account...
## Service name Microsoft Azure ## Proof There is no general approach for PoC. Microsoft Azure offers multiple services (CloudApp, Azure Websites, etc.) that use different domain names. General approach...
## Service name https://www.wix.com/ ## Proof  #Fingerprint Looks Like This Domain Isn't Connected To A Website Yet! #Steps 1. Register to wix 2. Create a new...
## Service name Amazon (AWS) S3 ## Proof Amazon S3 service is indeed vulnerable. Amazon S3 follows pretty much the same concept of virtual hosting as other cloud providers. S3...
Some Help with Cargo Collective Subdomain Takeover
## Service name Heroku ## Proof Heroku has same virtual hosting concept as other cloud providers. Various `*.herokudns.com` subdomain respond with the same set of A records. HTTP Host matters...
Hello sir please reply I got 404 page not found 404 Not Found Code: NoSuchKey Message: The specified key does not exist. Key: index.html RequestId: HostId: Code: NoSuchKey Message: The...
## Service name Vercel ## Proof Successful subdomain takeover on a harvard.edu subdomain (screenshot).  ## Documentation - Create a new repository on Github and upload an index.html - Visit...
## Service name FreshDesk ## Proof if the subdomain have an fingerprint and the cname is the same fingerprint Yes the subdomain can be takeover ! FingerPrint ` We couldn't...
Metadata
Owner
Metadata
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.