Domain Takeover Archives — LinuxSec Exploit https://exploit.linuxsec.org/category/web-hacking/domain-takeover/ Nothing is Ever Locked Thu, 01 Aug 2019 17:13:43 +0000 en-US hourly 1 https://wordpress.org/?v=6.4.3 Azure Traffic Manager Custom Domain or Subdomain Takeover https://exploit.linuxsec.org/azure-traffic-manager-custom-domain-subdomain-takeover/ https://exploit.linuxsec.org/azure-traffic-manager-custom-domain-subdomain-takeover/#respond Thu, 01 Aug 2019 09:01:30 +0000 https://exploit.linuxsec.org/?p=2730 Azure Traffic Manager Custom Domain or Subdomain Takeover. Salahsatu service yang bisa ditakeover adalah Traffic Manager dari Azure. Hal ini bisa dilakukan karena tidak ada verifikasi tambahan saat ingin menambahkan custom domain. Namun disini kasus subdomain takeover service Azure Traffic Manager cukup rare. Hal ini disebabkan ciri-ciri untuk mengecek subdomain yang vuln cukup susah dikarenakan […]

The post Azure Traffic Manager Custom Domain or Subdomain Takeover appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/azure-traffic-manager-custom-domain-subdomain-takeover/feed/ 0 Heroku Custom Domain or Subdomain Takeover https://exploit.linuxsec.org/heroku-custom-domain-subdomain-takeover/ https://exploit.linuxsec.org/heroku-custom-domain-subdomain-takeover/#respond Sat, 06 Oct 2018 13:31:24 +0000 https://exploit.linuxsec.org/?p=2490 Heroku Custom Domain or Subdomain Takeover –  Beberapa situs perusahaan di yang mengikuti program BugBounty di HackerOne pernah terkena kerentanan subdomain takeover via Heroku. Jadi bisa disimpulkan bahwa Heroku ini cukup populer. Nah di tutorial kali ini saya akan sharing bagaimana cara melakukan subdomain takeover via Heroku. Ciri-ciri subdomain yang memiliki kerentanan: There’s nothing here, […]

The post Heroku Custom Domain or Subdomain Takeover appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/heroku-custom-domain-subdomain-takeover/feed/ 0 FastMail Custom Domain or Subdomain Takeover https://exploit.linuxsec.org/fastmail-custom-domain-subdomain-takeover/ https://exploit.linuxsec.org/fastmail-custom-domain-subdomain-takeover/#respond Sat, 29 Sep 2018 08:06:16 +0000 https://exploit.linuxsec.org/?p=2476 FastMail Custom Domain or Subdomain Takeover – Fastmail juga memiliki kerentanan terhadap subdomain takeover. Hal tersebut karena tidak ada verifikasi tambahan saat kita mengatur custom domain. Error No page found We couldn’t find a page for the link you visited. Please check that you have the correct link and try again. If you are the […]

The post FastMail Custom Domain or Subdomain Takeover appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/fastmail-custom-domain-subdomain-takeover/feed/ 0 Surge.sh Custom Domain or Subdomain Takeover https://exploit.linuxsec.org/surge-sh-custom-domain-subdomain-takeover/ https://exploit.linuxsec.org/surge-sh-custom-domain-subdomain-takeover/#comments Sat, 29 Sep 2018 07:13:32 +0000 https://exploit.linuxsec.org/?p=2471 Surge.sh Custom Domain or Subdomain Takeover – Sejauh ini melakukan takeover domain di Surge adalah yang paling mudah. Bukan bermaksud meremehkan, namun proses yang harus dilalui sangat simpel. Yang harus Diperiapkan OS Linux – bebas mau di lokal atau di vps. Nodejs – install nodejs Vuln Berikut ciri-ciri situs yang bisa ditakeover Error: project not […]

The post Surge.sh Custom Domain or Subdomain Takeover appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/surge-sh-custom-domain-subdomain-takeover/feed/ 1 Shopify Custom Domain or Subdomain Takeover https://exploit.linuxsec.org/shopify-custom-domain-subdomain-takeover/ https://exploit.linuxsec.org/shopify-custom-domain-subdomain-takeover/#respond Sat, 29 Sep 2018 03:01:43 +0000 https://exploit.linuxsec.org/?p=2462 Shopify Custom Domain or Subdomain Takeover – Masih seputar subdomain takeover. Kali ini targetnya adalah situs yang menggunakan platform shopify. Bagi yang belum tau, shopify adalah platform situs jual beli yang cukup populer. Dan nampaknya verifikasi di situs ini tidak ada lagkah tambahan selain hanya menggunakan cname dan a record yang telah ditentukan.   Sorry, […]

The post Shopify Custom Domain or Subdomain Takeover appeared first on LinuxSec Exploit.

]]> https://exploit.linuxsec.org/shopify-custom-domain-subdomain-takeover/feed/ 0