Curated security research, vulnerabilities, advisories and tools for practitioners.

A Guide to DNS Takeovers: The Misunderstood Cousin of Subdomain Takeovers

Summary

Introduction Let's start with this: A DNS takeover is not the same as a subdomain takeover. Subdomain takeovers are old news. Hackers who caught onto them early made busloads of bounties by automating their detection and exploitation. They're still out there, but competition is fierce. Crafty hackers built bots that detect and report subdomain takeovers within minutes of them becoming vulnerable. DNS takeovers are the new Orange. They've become popular among seasoned bug bounty hunters, but a
Published
Collected