search

EdOverflow / can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Creative Commons Attribution 4.0 International
4.89k stars 717 forks source link

Gumfury subdomain takeover #154

Open khaledibnalwalid opened 4 years ago

khaledibnalwalid commented 4 years ago

Service name

Gumfury

Proof

https://khaledibnalwalid.wordpress.com/2020/06/25/gemfury-subdomain-takeover/

Documentation

th3r4id commented 2 years ago

Looks like edge case now getting an error "Name already exists" @EdOverflow

0xAm225 commented 1 year ago

Looks like edge case now getting an error "Name already exists" @EdOverflow

Looks like edge case now getting an error "Name already exists" @EdOverflow

true, i just got the same, but also the page looks differecent then @khaledibnalwalid shared, looks something like http request logging, i tried to claim it but it said "Name Already Exists"

ZishanAdThandar commented 1 year ago

LOOKS LIKE NOT VULNERABLE

I scanned with subzy. Result showed like that. And during takeover it shows "Name already exists".

1 2

0xAm225 commented 1 year ago

LOOKS LIKE NOT VULNERABLE

I scanned with subzy. Result showed like that. And during takeover it shows "Name already exists".

1 2

Exactly same with me lol, i also used subzy and then tried to claim it but it says the name is already taken

bhataasim1 commented 1 year ago

I think this is NOT VULNERABLE

wadethrillson commented 1 year ago

i added names to my domains but now it says dns validation issue. how to fix that?

itsryuku commented 6 months ago

Thu May 23 10:32:27 AM EDT 2024, didn't work for me.

khaledibnalwalid commented 6 months ago

I think it has been resolved from the vendor

RedNotAFatPenquin commented 3 weeks ago

image i got this

ceylanb commented 2 days ago

Not vulnerable. I tried 10+ subdomains matching the vulnerability conditions, but "Name already exists" returned.