Subdomain Takeover due to unclaimed domain pointing to AWS
内存破坏 / Off-by-one Error / #317005
该报告还没有中文解读。
原文摘录
摘自原文(3806 字符中的一小部分)
**Note: I know this is on an out of scope domain, however felt it should still be raised as it was the only subdomain of data.gov to be vulnerable.**
原文中的代码
nslookup 18f.domains.api.data.gov Server: 213.186.33.99 Address: 213.186.33.99#53 Non-authoritative answer: 18f.domains.api.data.gov canonical name = dn9rrjaiux2m0.cloudfront.net. Name: dn9rrjaiux2m0.cloudfront.net Address: 52.85.89.116 Name: …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 GSA Bounty 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @zephrfish · 版权归作者与 GSA Bounty 所有