[CRITICAL]-Taking over entire subdomain of romit.io
该报告还没有中文解读。
原文摘录
摘自原文(843 字符中的一小部分)
During recon, I found out that `blog.romit.io` was not mapped with `wordpress.com` and the domain was returning back error like `this domain has not been mapped with wordpress.com, to map it please login into wordpres.com`.
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Enter 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @eh0x01 · 版权归作者与 Enter 所有