Finding a Subdomain Takeover via CNAME Misconfiguration
Introduction During reconnaissance, I discovered a subdomain takeover vulnerability caused by a misconfigured DNS record pointing to an inactive third-party service. This misconfiguration allowed the possibility for an attacker to claim the resource and host malicious content under the organization’s domain. Subdomain takeover vulnerability occurs when a subdomain points to an unclaimed external service. Learn how it […]
USA