News for hackers. Stuff that matters.

A comment on Subdomain Takeovers.

Re:Subdomain Takeovers by hermanb on Wednesday April 27, 2022 @08:02AM (#31178838)
Happens with GitHub Pages too. You can crawl for repos with CNAME file and if any of those repos is removed or CNAME is removed, you can takeover.

I believe this is now hardened a bit by setting the CNAME to a GitHub domain with the user/org as subdomain.

[ Parent | on HN ]

There are no comments on this comment yet.