subjack icon indicating copy to clipboard operation
subjack copied to clipboard

Published 20 hours ago • verified publisher icon haccer

Add Vercel fingerprint

Open rzhade3 opened this issue 4 years ago • 2 comments

This PR adds a fingerprint for domains hosted on Vercel. As pointed out by this submitter: https://github.com/EdOverflow/can-i-take-over-xyz/issues/183, Vercel is also vulnerable to subdomain takeover 😄

I've stood up a domain at dashdot.app to verify that this fingerprint works.

rzhade3 avatar Dec 11 '20 23:12 rzhade3

Is there a cname entry for this?

ethrx avatar Jan 19 '21 19:01 ethrx

Is there a cname entry for this?

I've been running it without a CNAME, but this researcher: https://github.com/EdOverflow/can-i-take-over-xyz/issues/183#issuecomment-751317332 found that there are edge cases in which this fingerprint may have false positives. As such, maybe this fingerprint isn't ready to be merged in.

rzhade3 avatar Jan 21 '21 00:01 rzhade3