Subdomain Takeover of brand.zen.ly
该报告还没有中文解读。
原文摘录
摘自原文(1553 字符中的一小部分)
Background: > + Subdomain takeover vulnerabilities occur when a subdomain (subdomain.example.com) is pointing to a service (e.g. GitHub pages, Heroku, etc.) that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that …
原文中的代码
└─$ dig brand.zen.ly brand.zen.ly. 255 IN CNAME brandpad.io.
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Zenly 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @megaman_ · 版权归作者与 Zenly 所有