#Tips

Do you know about subdomain takeover? it is a simple bug taking over the CNAMEs linked to the subdomain.

Example: blog.geezsecurity.com might have CNAME with some blogging site like geezsec.hash.blog (or github) then if the geezsec.hash.blog is removed by the admin but the configuration(CNAME) is not fixed yet And if i can Create account with the geezsec.hash.blog, when ppls access blog.geezsec.com they will be on the new geezsec.hash.blog made by the attacker, that is subdomain takeover.


Another Simple example lets see "Social Media takeover"(not sure if i can call it like this). Bicha think like websites have a contact us section with their instagram/telegram accounts listed. then some day that company changed their telegram username. but if the site still list the old account, when u click it and says "account not found". then you can create telegram account with that username. then when users go to the site and wanted to contact the company and click on that telegram BOOM! i will be their support to trick and take their username and password😁😁😂

any ways, that is subdomain takeover. i saw some account not founds and it click on ma brain.

Stay Safe
#geeztech @geeztechgroup