PR3R00T

Hey! I just found a subdomain pointing to azurefd.net, investigations show that its azures (front door) service, you can do subdomain takeover on this domain type. You can use the...

Theres two parts to these types of subdomain takeovers, Firstly the {{something}}.azurewebsites.net registration. This is the creation of the service which in your case has been done by someone. Secondly...

Yeah so a NOERROR means the DNS lookup worked and the host is alive. So in your case this subdomain is not possible to be taken over as its already...

@OffensiveBugHunter No problem :) Reach out to me over Twitter @PR3R00T if you need any help :) Good Luck on the hunt!

@abd525 Check out https://cystack.net/research/subdomain-takeover-chapter-two-azure-services - section - Virtual Machine.

Hey @vletoux please see below:    Apologies for the userAccountControl, Couldn't find a powershell command for it.

Hey @vletoux So running PingCastle 2.10.1.0 as a created account with domain admins group privileges. interactive mode - healthcheck -default Domain (my case AC.LOCAL) through CMD. ... And I've just...