can-i-take-over-xyz icon indicating copy to clipboard operation
can-i-take-over-xyz copied to clipboard

Published 20 hours ago • verified publisher icon EdOverflow

Is uservoice subdomain takeover possible?

Open 1nc0gn170 opened this issue 3 years ago • 4 comments

I have found a program where website its response is 404 and Its Cname is pointing to uservoice.com. I didn't find any registration portal for that site.

;; ANSWER SECTION:
mywebsite.com. 299 IN	CNAME	mywesbsite.uservoice.com.

Screenshot from 2020-08-21 14-44-19

Anyone Help me please

1nc0gn170 avatar Aug 21 '20 09:08 1nc0gn170

Wondering this myself as a former UserVoice user. CC @austintaylor @attack7 @hoffoo

HammyHavoc avatar Jan 20 '21 11:01 HammyHavoc

@n41n4 @HammyHavoc

It is not possible - subdomain cnames are unique and cannot be reused

hoffoo avatar Jan 21 '21 21:01 hoffoo

@n41n4 @HammyHavoc

It is not possible - subdomain cnames are unique and cannot be reused

Thanks for that! Thought as much. I had somebody reach out asking for a bug bounty reward in exchange for this "information".

HammyHavoc avatar Jan 22 '21 10:01 HammyHavoc

More info https://hackerone.com/reports/269109

pdelteil avatar Dec 06 '22 18:12 pdelteil