Hostile Subdomain Takeover by Ankit Prateek
1 like844 views
The document discusses the risk of hostile subdomain takeover, where individuals can register abandoned subdomains and redirect them to third-party apps. It emphasizes the need for regular checks on DNS configurations to prevent such takeovers by ensuring unused subdomains are properly managed. The content includes a demo and provides credit to contributors for further information.
Hostile Subdomain Takeover by Ankit Prateek
- 2. HST in a minute ● People register subdomains & point it to 3rd party apps/websites ● Github pages, Heroku, S3, AWS are some examples ● Sometimes they migrate or stop using the feature and forget to remove the name pointer ● An entry exists at nameserver pointing to a page ● Create an account and claim that page. ● Done!
- 3. #OkThxBye
- 5. DEMO