EdOverflow / can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Creative Commons Attribution 4.0 International
4.83k stars 715 forks source link

Anima vulnerable to subdomain takeover #126

Open TakSec opened 4 years ago

TakSec commented 4 years ago

Service name

Anima - https://www.animaapp.com/

Proof

Created a PoC for a bug bounty report and it worked without any issues.

Documentation

A Record: subdomain.domain.com. 600 IN A 35.164.217.247 Error page: Missing Website If this is your website and you've just created it, try refreshing in a minute https://docs.animaapp.com/v1/launchpad/08-custom-domain.html

EdOverflow commented 4 years ago

Thank you, @TakSec. :+1: