search

haccer / subjack

Subdomain Takeover tool written in Go
Apache License 2.0
1.92k stars 338 forks source link

Add Vercel fingerprint #79

Closed rzhade3 closed 2 years ago

rzhade3 commented 3 years ago

This PR adds a fingerprint for domains hosted on Vercel. As pointed out by this submitter: https://github.com/EdOverflow/can-i-take-over-xyz/issues/183, Vercel is also vulnerable to subdomain takeover 😄

I've stood up a domain at dashdot.app to verify that this fingerprint works.

ethrx commented 3 years ago

Is there a cname entry for this?

rzhade3 commented 3 years ago

Is there a cname entry for this?

I've been running it without a CNAME, but this researcher: https://github.com/EdOverflow/can-i-take-over-xyz/issues/183#issuecomment-751317332 found that there are edge cases in which this fingerprint may have false positives. As such, maybe this fingerprint isn't ready to be merged in.