-
-
Notifications
You must be signed in to change notification settings - Fork 704
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Worksites vulnerable to subdomain takeover #142
Labels
vulnerable
Someone has provided proof in the issue ticket that one can hijack subdomains on this service.
Comments
Nice Catch! @melbadry9 |
Does this not involve |
@adityathebe No, It has A record pointing to IP |
adiffpirate
added a commit
to adiffpirate/can-i-take-over-xyz
that referenced
this issue
Jul 19, 2020
Added: - Gemfury EdOverflow#154 - Uberfilp EdOverflow#150 - Agile CRM EdOverflow#145 - Pingdom EdOverflow#144 - Worksites EdOverflow#142
Merged
manasmbellani
pushed a commit
to manasmbellani/subjack
that referenced
this issue
Aug 16, 2020
manasmbellani
pushed a commit
to manasmbellani/subjack
that referenced
this issue
Aug 16, 2020
Is the payment address only for the United States? |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
vulnerable
Someone has provided proof in the issue ticket that one can hijack subdomains on this service.
Service name
Worksites - https://worksites.net
Proof
Vulnerable Error Message
![poc](https://user-images.githubusercontent.com/43918685/79306162-0984b200-7ef5-11ea-83a9-8aeeb2d03d95.png)
Add Vulnerable domain to your site
![poc3](https://user-images.githubusercontent.com/43918685/79306422-78faa180-7ef5-11ea-9fc6-8ddb36761e7a.png)
Takeover
![poc2](https://user-images.githubusercontent.com/43918685/79306433-7dbf5580-7ef5-11ea-881a-f5e89f2044fc.png)
Publish your site with ($27.00 USD per month)
Fingerprint
Company Not Found
Hello! Sorry, but the website you’re looking for doesn’t exist.
The text was updated successfully, but these errors were encountered: