search

EdOverflow / can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Creative Commons Attribution 4.0 International
4.89k stars 718 forks source link

subdomain takeover at FeedPress not working #80

Open sumgr0 opened 5 years ago

sumgr0 commented 5 years ago

Service name: FeedPress

Documentation

Based on the information shared in the hackerone report for FeedPress based subdomain, not able to takeover the ownership. The error message on the URL stated:

FeedPress The feed has not been found. You have a blog or a website? Let us handle your RSS feeds.

After creating the account on feedpress, and trying to takeover the subdomain by selecting My Hostname and entering the programs sub-domain, it results in the error message - "The hostname xyz.domain.com is already registered on FeedPress."

Is the sub-domain takeover in such scenario possible?

Thanks

JLLeitschuh commented 5 years ago

Sometimes the error isn't truly indicative of being able to perform a takeover.

Eg. This site indicates an error, suggesting that the sub-domain takeover is possible.

https://feed.gradle.org/

However, these sites are completely valid indicating that the domain is actually in use in a way that can't be compromised.

All of this being said, the general security of FeedPress isn't all that good. I've been trying to get in contact with their team about other security problems with their site and they aren't responding. Honestly, I would recommend not trusting FeedPress with access to one of your sub-domains as their security practices don't seem to be all that good.

gy741 commented 4 years ago

Hello, FeedPress appears to be no longer vulnerable.

The hostname xx.target.com is already registered on FeedPress.

Thanks

cyberblackhole commented 4 years ago

I confirm feedpress is not vulnerable. Testing on few domains.

pdelteil commented 4 years ago

Not vulnerable. Also received a

The hostname xx.target.com is already registered on FeedPress.