"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Creative Commons Attribution 4.0 International
4.83k
stars
715
forks
source link
Anima vulnerable to subdomain takeover #126
Open
TakSec opened 4 years ago
Service name
Anima - https://www.animaapp.com/
Proof
Created a PoC for a bug bounty report and it worked without any issues.
Documentation
A Record: subdomain.domain.com. 600 IN A 35.164.217.247 Error page:
Missing Website
If this is your website and you've just created it, try refreshing in a minute
https://docs.animaapp.com/v1/launchpad/08-custom-domain.html