can-i-take-over-xyz icon indicating copy to clipboard operation
can-i-take-over-xyz copied to clipboard

subdomain takeover at FeedPress not working

Open sumgr0 opened this issue 5 years ago • 4 comments

Service name: FeedPress

Documentation

Based on the information shared in the hackerone report for FeedPress based subdomain, not able to takeover the ownership. The error message on the URL stated:

FeedPress The feed has not been found. You have a blog or a website? Let us handle your RSS feeds.

After creating the account on feedpress, and trying to takeover the subdomain by selecting My Hostname and entering the programs sub-domain, it results in the error message - "The hostname xyz.domain.com is already registered on FeedPress."

Is the sub-domain takeover in such scenario possible?

Thanks

sumgr0 avatar Mar 03 '19 17:03 sumgr0

Sometimes the error isn't truly indicative of being able to perform a takeover.

Eg. This site indicates an error, suggesting that the sub-domain takeover is possible.

https://feed.gradle.org/

However, these sites are completely valid indicating that the domain is actually in use in a way that can't be compromised.

  • https://feed.gradle.org/blog.atom
  • https://feed.gradle.org/blog/features.atom
  • https://feed.gradle.org/blog/events.atom
  • https://feed.gradle.org/blog/general.atom

All of this being said, the general security of FeedPress isn't all that good. I've been trying to get in contact with their team about other security problems with their site and they aren't responding. Honestly, I would recommend not trusting FeedPress with access to one of your sub-domains as their security practices don't seem to be all that good.

JLLeitschuh avatar Mar 04 '19 15:03 JLLeitschuh

Hello, FeedPress appears to be no longer vulnerable.

The hostname xx.target.com is already registered on FeedPress.

Thanks

gy741 avatar Jun 14 '20 10:06 gy741

I confirm feedpress is not vulnerable. Testing on few domains.

cyberblackhole avatar Sep 05 '20 06:09 cyberblackhole

Not vulnerable. Also received a

The hostname xx.target.com is already registered on FeedPress.

pdelteil avatar Sep 23 '20 18:09 pdelteil