-
## Service name
readthedocs.org
## Proof
If a subdomain is pointing to `readthedocs.io` via CNAME records but not claimed. The website will throw an error like this
Signup for a an acco…
-
## Service name
FreshDesk
## Proof
if the subdomain have an fingerprint and the cname is the same fingerprint
Yes the subdomain can be takeover !
FingerPrint
` We couldn't find support.exa…
-
## Report
:warning: reported via `security@weave.works` on **January 18**...
**Describe**
```
High-Impact Subdomain Takeover
FQDN: wkp.weave.works
IP address: 13.49.241.153
Overview o…
-
## Service name
[Helprace](https://helprace.com/)
## Fingerprint
```
Alias not configured!
Admin of this Helprace account needs to set up domain alias
(see Step 2 here: Using your own domain w…
-
## Service name
Worksites - https://worksites.net
## Proof
- Vulnerable Error Message
![poc](https://user-images.githubusercontent.com/43918685/79306162-0984b200-7ef5-11ea-83a9-8aeeb2d03d95.png…
-
Hello sir please reply
I got 404 page not found
404 Not Found
Code: NoSuchKey
Message: The specified key does not exist.
Key: index.html
RequestId:
HostId:
Code: NoSuchKey
Message: The sp…
-
## Service name
Heroku
## Proof
Heroku has same virtual hosting concept as other cloud providers. Various `*.herokudns.com` subdomain respond with the same set of A records. HTTP Host matters f…
-
## Service name
Kinsta
## Website
https://kinsta.com/
## Credential
![screenshot 45 _li](https://user-images.githubusercontent.com/40210313/46437332-fa258580-c70f-11e8-9985-17482634cc24.jpg)
…
-
## Service name
CloudApp - getcloudapp.com
## Proof
![Screenshot 2021-02-19 221435](https://user-images.githubusercontent.com/27290045/108551788-77fa8380-7301-11eb-9f5f-7e8414d98c4b.jpg)
![201…
-
## Service name
xsolla sitebuilder
## Proof
NO POC yet
## Documentation
![image](https://user-images.githubusercontent.com/62383782/113528693-ec5c5e00-95f3-11eb-889c-f4d71457c276.png)
ghost updated
3 years ago