Timeline for Hijacking stale DNS entry to point to your own website
Current License: CC BY-SA 4.0
4 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Feb 12, 2021 at 7:18 | comment | added | jub0bs | A subdomain takeover may also be used to bypass defenses like an Origin check (against CSRF or in the context of CORS). Also, another thing you can do to prevent them is to choose vendors wisely; think twice before becoming patrons of the ones that don't protect you against subdomain takeovers, as they represent a liability for your organization. Shameless plug: I've just published a post on the topic, in which I go into more details. | |
Jul 14, 2020 at 19:41 | vote | accept | CommunityBot | ||
Jul 12, 2020 at 11:44 | history | edited | Conor Mancone | CC BY-SA 4.0 |
added 552 characters in body
|
Jul 12, 2020 at 10:41 | history | answered | Conor Mancone | CC BY-SA 4.0 |