-
A malicious actor could takeover a broken link exists on the homepage of the app / game.
Produce ;
- Navigate to https://desuicoinflip.io/
- Click on Flip Responsibility, which is found near …
-
Some Help with Cargo Collective Subdomain Takeover
-
## Service name
Amazon (AWS) S3
## Proof
Amazon S3 service is indeed vulnerable. Amazon S3 follows pretty much the same concept of virtual hosting as other cloud providers. S3 buckets might be co…
-
## Service name
GetResponse - https://www.getresponse.com/
## Vulnerable domain which can be takeover
![image](https://user-images.githubusercontent.com/209987/131318854-5435af63-9d24-4c35-86db-…
-
## Service name: FeedPress
## Documentation
Based on the information shared in the hackerone report for FeedPress based subdomain, not able to takeover the ownership. The error message on the URL …
-
Yes, you can perform DNS takeovers of domains pointing to Hurricane Electric's DNS service.
### Service [Hurricane Electric](https://dns.he.net/)
### Status Vulnerable
### Nameserver
>ns5…
-
For some of the mentioned vendors, which I've had experience dealing with, there is no clarification to hackers using this list of where a false positive could occur.
In the instance of Unbounce fo…
-
[*] 7175 domain will be scanned.
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x10 pc=0x73cafb]
goroutine 24 [runn…
-
Hi Polymath Security Team,
I found that your website is suffering from subdomain takeover pointing to Unbounce pages but no such page is connected to the external server which is very dangerous.
…
-
## Service name
Amazon Cognito
## Proof
1. Find a domain of form "*.auth..amazoncognito.com" referenced in some app where it NXDOMAIN's when resolved
2. Create a Cognito user pool on any AWS acc…