-
### Service Google Cloud DNS
### Status Vulnerable (as of July 2023)
### Nameserver
ns-cloud-**.googledomains.com
### Explanation
If a domain points to one of the nameservers listed abo…
ghost updated
4 months ago
-
### Service [DNSimple](https://dnsimple.com/)
### Status Vulnerable
### Nameserver
> ns1.dnsimple.com
ns2.dnsimple.com
ns3.dnsimple.com
ns4.dnsimple.com
### Explanation
You can…
-
## Smugmug
## Proof To Takeover
1) Create your custom subdomain on smugmug example : your-custom.smugmug.com
2) go to https://your-custom.smugmug.com/settings?nick=your-custom
3) Scroll down a…
-
## Service name
readthedocs.org
## Proof
If a subdomain is pointing to `readthedocs.io` via CNAME records but not claimed. The website will throw an error like this
Signup for a an acco…
-
## Service name
AWS S3 && Fastly
I've come across a sub-domain with a CNAME pointing to Fastly.net service while the actual http fingerprint confirms the S3 bucket Not in Use.
Is there are p…
-
Hello,
I have Win 7 with all updates. I also have Python 2.7 + 3.6. When I run sublist3r.py -d domain.com, I get the following error:
Traceback (most recent call last):
File "C:\Users\xxx\Doc…
-
### Description
The tools grabs the tarball from the project's domain which leaves an opening for supply chain attacks should a bad actor gain control of the domain; [not impossible](https://www.thev…
-
### Service [000Domains](https://000Domains.com)
### Status Vulnerable
### Nameserver
> ns1.000domains.com
ns2.000domains.com
fwns1.000domains.com
fwns2.000domains.com
### Explanation
…
-
## Subdomain Takeover through readme.io
readme.io is another service which's subdomains can be taken over if it says **"Project doesnt exist... yet!"**. There's a sign-up button and if someone does,…
-
Would love to....but will mark this as a v3 enhancement for the future.
And I need to update this ticket when I revisit ADCS vuln: https://github.com/AlmondOffSec/PassTheCert/issues/13