ON THIS PAGE

前言

国内的子域名接管漏洞比较少

今天遇到一个pagewiz的网站疑似存在子域名接管，然后去尝试了一下，失败了，所以觉得还是有必要先占个位，等以后遇到成功案例再写

核心

copy自：https://github.com/EdOverflow/can-i-take-over-xyz

Engine	Status	Fingerprint	Discussion	Documentation
Acquia	Not vulnerable	`Web Site Not Found`	Issue #103
Agile CRM	Vulnerable	`Sorry, this page is no longer available.`	Issue #145
Airee.ru	Vulnerable		Issue #104
Anima	Vulnerable	`If this is your website and you've just created it, try refreshing in a minute`	Issue #126	Anima Documentation
Akamai	Not vulnerable		Issue #13
AWS/S3	Vulnerable	`The specified bucket does not exist`	Issue #36
AWS/Load Balancer (ELB)	Not Vulnerable	status NXDOMAIN and CNAME pointing to XYZ.elb.amazonaws.com	Issue #137
Bitbucket	Vulnerable	`Repository not found`
Campaign Monitor	Vulnerable	`Trying to access your account?`		Support Page
Cargo Collective	Vulnerable	`404 Not Found`	Issue #152	Cargo Support Page
Cloudfront	Not vulnerable	ViewerCertificateException	Issue #29	Domain Security on Amazon CloudFront
Desk	Not vulnerable	`Please try again or try Desk.com free for 14 days.`	Issue #9
Digital Ocean	Vulnerable	Domain uses DO name serves with no records in DO.
Discourse	Vulnerable			Hackerone
Fastly	Edge case	`Fastly error: unknown domain:`	Issue #22
Feedpress	Not vulnerable	`The feed has not been found.`	Issue #80
Firebase	Not vulnerable		Issue #128
Fly.io	Vulnerable	`404 Not Found`	Issue #101
Freshdesk	Not vulnerable	`We couldn't find servicedesk.victim.tld Maybe this is still fresh! You can claim it now at http://www.freshservice.com/signup`	Issue #214	Freshdesk Support Page
Gemfury	Vulnerable	`404: This page could not be found.`	Issue #154	Article
Ghost	Vulnerable	`The thing you were looking for is no longer here, or never was`
Github	Vulnerable	`There isn't a GitHub Pages site here.`	Issue #37 Issue #68
Gitlab	Not vulnerable		HackerOne #312118
Google Cloud Storage	Not vulnerable	`NoSuchBucket`The specified bucket does not exist.
HatenaBlog	vulnerable	`404 Blog is not found`
Help Juice	Vulnerable	`We could not find what you're looking for.`		Help Juice Support Page
Help Scout	Vulnerable	`No settings were found for this company:`		HelpScout Docs
Heroku	Edge case	`No such app`	Issue #38
HubSpot	Not vulnerable	`This page isn’t available`
Instapage	Not vulnerable		Issue #73
Intercom	Vulnerable	`Uh oh. That page doesn't exist.`	Issue #69	Help center
JetBrains	Vulnerable	`is not a registered InCloud YouTrack`		YouTrack InCloud Help Page
Key CDN	Not vulnerable		Issue #112
Kinsta	Vulnerable	`No Site For Domain`	Issue #48	kinsta-add-domain
Landingi	Edge case	`It looks like you’re lost...`	Issue #117
LaunchRock	Vulnerable	`It looks like you may have taken a wrong turn somewhere. Don't worry...it happens to all of us.`	Issue #74
Mashery	Edge Case	`Unrecognized domain`	HackerOne #275714, Issue #14
Microsoft Azure	Vulnerable		Issue #35
Netlify	Edge Case	`Not Found - Request ID:`	Issue #40
Ngrok	Vulnerable	`Tunnel *.ngrok.io not found`	Issue #92	Ngrok Documentation
Pantheon	Vulnerable	`404 error unknown site!`	Issue #24	Pantheon-Sub-takeover
Pingdom	Vulnerable	`Sorry, couldn't find the status page`	Issue #144	Support Page
Readme.io	Vulnerable	`Project doesnt exist... yet!`	Issue #41
Sendgrid	Not vulnerable
Shopify	Edge Case	`Sorry, this shop is currently unavailable.`	Issue #32, Issue #46	Medium Article
Short.io	Vulnerable	`Link does not exist`	Issue #260
SmartJobBoard	Vulnerable	`This job board website is either expired or its domain name is invalid.`	Issue #139	Support Page
Smartling	Edge Case	`Domain is not configured`	Issue #67
Squarespace	Not vulnerable
Statuspage	Not Vulnerable	`Status page pushed a DNS verification in order to prevent malicious takeovers what they mentioned in` This Doc	PR #105 and PR #171	Statuspage documentation
Strikingly	Vulnerable	`page not found`	Issue #58	Strikingly-Sub-takeover
Surge.sh	Vulnerable	`project not found`		Surge Documentation
Tumblr	Vulnerable	`Whatever you were looking for doesn't currently exist at this address`	Issue #240	Tumblr Custom Domains
Tilda	Edge Case	`Please renew your subscription`	Issue #155 PR #20
Uberflip	Vulnerable	`Non-hub domain, The URL you've accessed does not provide a hub.`	Issue #150	Uberflip Documentation
Unbounce	Not Vulnerable	`The requested URL was not found on this server.`	Issue #11
Uptimerobot	Vulnerable	`page not found`	Issue #45	Uptimerobot-Sub-takeover
UserVoice	Vulnerable	`This UserVoice subdomain is currently available!`
Webflow	Edge Case	`The page you are looking for doesn't exist or has been moved.`	Issue #44	forum webflow
Wix	Edge Case	`Looks Like This Domain Isn't Connected To A Website Yet!`	Issue #231
Wordpress	Vulnerable	`Do you want to register *.wordpress.com?`
Worksites	Vulnerable	`Hello! Sorry, but the website you’re looking for doesn’t exist.`	Issue #142
WP Engine	Not vulnerable
Zendesk	Not vulnerable	`Help Center Closed`	Issue #23	Zendesk Support

参考

results matching ""

No results matching ""