Subdomain Takeover

Recently blackhat hackers approached us saying they could takeover and are asking us for a big ransom. Please help us to find what they can takeover. Our website is located at https://futurevera.thm Difficulty = Easy Challenges: Sub-Domain Enumeration, Sub-Domain Takeover. TryHackMe Room Link: https://tryhackme.com/room/takeover The beginning starts the machine and grub the IP…

CocoaPods is THE dependency manager for iOS and Mac projects. It helps software developers easily add pre-made pieces of code (called “libraries” or “dependencies”) to their iOS or Mac projects. These libraries of code can help developers add extra features or functionality to their apps without having to write all…

Hey everyone! This is the walkthrough of the Takeover machine from TryHackMe which clearly demonstrates how enumeration is the key to finding success. Link to the room: https://tryhackme.com/room/takeover Read the machine description clearly first. It’s clearly something about some subdomain takeover. …

or How to Skip All Classes but Pass the Exam — Salut, reader. The way I got the flag seemed funny to me. And thus this write-up was born. My first one, by the way. I encourage you to challenge your enumeration skills before reading any further. You can find this room here. I hope you’ve already spent a few hours…

Hello Guys..!! Happy New Year 2023 to all my followers 🥳 Hope you are doing well Today we are going to see how to find Sub-domain Takeover vulnerabilities on GitHub Pages using the Google Dork. Note: This Trick was originally founded by Avinash Jain (@logicbomb) and I am just following…

Hello Guys..!! Happy New Year 2023 to all my followers 🥳 Hope you are doing well Today we are going to discuss about how I was able to find 136 Sub-domain Takeover vulnerabilities on a Single Target using the Nuclei tool. Note-1: For Privacy and Security reasons I am not…

Subdomain takeover is a high-security vulnerability via which an attacker can control an expired management service from where the subdomain of the site was pointing What is that service? It can be anything some of the vendors uses services like Shopify to build their shopping platform without changing their official subdomain…

Note: Use all the information mentioned here for educational purposes only. Never try to harm anyone for any purpose as it is illegal. SES: Subdomain Enumeration Script There are tons of tools out there that do all kinds of reconnaissance, but it can be quite difficult to narrow down what…

Hello Guys, I’m Suprit a cybersecurity enthusiast and researcher. This is mine first blog and I’m going to explain how I was able to hack a subdomain of an organization with mine easy and efficient methodology. Hello F.R.I.E.N.D !! I was hunting and keep switching from programs to programs from…