SUBDOMAIN TAKEOVER FOR BUG BOUNTY

hey guys hackingcage is here, welcome to back again another post. A subdomain takeover is taken into account a high severity threat and boils right down to the registration of a site by someone else by doing this , the hacker will take full management of the subdomains.

If AN assaulter will try this , they’ll doubtless browse cookies set from the most domain , perform cross website scripting , or circumvent content security policies , thereby sanctioning them to capture protected info (including logins)or send Malicious content to unsuspecting users.

A subdomain is like AN outlet. If you’ve got your own appliance (host) blocked into it , everything is okay. If you take away your application from the outlet (or haven’t blocked one in yet), somebody will connect a special one. you need to cut power at the breaker or fuse box (DNS) to forestall the outlet from getting used by some other person.

for full article : https://www.hackingcage.com/2021/05/SUBDOMAIN-TAKEOVER-FOR-BUGBOUNTY.html