Subdomain Takeover

Disclosed: 2016-03-09 10:57:00 By kiraak-boy To zomato
Unknown
Vulnerability Details
Hello, Your Subdomain engineering.zomato.com is Pointing to Tumblr.com You should immediately remove the DNS-entry for engineering.zomato.com is Pointing to Tumblr.com.. Any One Can Claim That Domain , Please Read The Advisory Below. Remediation Please make sure you're always going through your DNS-entries so no subdomains are pointing to external services you do not use. We've written an advisory about this at Detectify: http://blog.detectify.com/post/100600514143/hostile-subdomain-takeover-using-heroku-github-desk Where you can read more about this sort of attack. I Have Done NSLookup For POC :- nslookup engineering.zomato.com Server: 192.168.188.2 Address: 192.168.188.2#53 Non-authoritative answer: engineering.zomato.com canonical name = domains.tumblr.com. Name: domains.tumblr.com Address: 66.6.42.22 Name: domains.tumblr.com Address: 66.6.43.22 Thanks!
Actions
View on HackerOne
Report Stats
  • Report ID: 113869
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report