PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Guide To Subdomain Takeovers 2.0

hackerone.com | research | #bug-bounty | #reconnaissance | #web-security | #guide | #subdomain-takeover | #dns
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An updated guide to subdomain takeovers: how dangling DNS records pointing to third-party services let attackers claim control, with enumeration, exploitation, and reporting best practices.
Published
Collected

Related coverage

blog · hackerone.com
A Guide To Subdomain Takeovers
EdOverflow's guide to subdomain takeovers: dangling DNS records pointing to unclaimed third-party services like GitHub Pages let attackers claim a vulnerable subdomain and serve their own content.
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · netspi.com
10 Techniques for Blindly Mapping Internal Networks
Catalogs ten blind internal network discovery techniques: DHCP info, traffic sniffing, ARP broadcasts, net view, DNS zone transfers, domain accounts, traceroute, and ping or port scans.
research · portswigger.net
So you want to be a web security researcher?
James Kettle shares guidance on becoming a web security researcher: mastering the state of the art, breaking into the industry, bug bounty paths and recommended resources.
Back