Eternal · Report #1130376
subdomain takeover on fddkim.zomato.com
Validstatus
mediumseverity
61upvotes
27 Jan 2022disclosed
Summary
Our subdomain fddkim.zomato.com was vulnerable to a 0-day subdomain takeover vulnerability on Freshdesk. The DNS entry was removed on our end to fix this.
HOW I hacked thousand of subdomains
writeup-->https://medium.com/@moSec/how-i-hacked-thousand-of-subdomains-6aa43b92282c
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.