Subdomain takeover via Medium (not possible anymore)

EdOverflow / can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Creative Commons Attribution 4.0 International

4.88k stars 716 forks source link

Subdomain takeover via Medium (not possible anymore) #206

Open rtcms opened 3 years ago

rtcms commented 3 years ago

Service name

Medium - https://medium.com/

Proof

https://hackerone.com/reports/1034023

Documentation

https://help.medium.com/hc/en-us/articles/115003053487-Setting-up-a-custom-domain-for-your-profile-or-publication

Fingerprint : Oops! We couldn’t find that page. Sorry about that

hakluke commented 3 years ago

Don't think this is possible anymore. Just found a subdomain displaying that message and received this error when attempting to take it over.

In the hackerone link provided above, the reporter socially engineered the Medium team to make this change - now that Medium has an automated system for this, I don't think they'd do it manually.

rtcms commented 3 years ago

Hey @hakluke , Thanks for pointing this out

0xspade commented 1 year ago

looks like edge case?

https://smaranchand.com.np/2022/10/taking-over-the-medium-subdomain-using-medium/