Subdomain Takeover on proxies.sifchain.finance pointing to vercel
该报告还没有中文解读。
原文摘录
摘自原文(2113 字符中的一小部分)
Subdomain takeover vulnerabilities occur when a subdomain (subdomain.example.com) is pointing to a service (e.g. GitHub pages, Heroku, etc.) that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that subdomain. For …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Sifchain 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @hrdfrdh · 版权归作者与 Sifchain 所有