WebSummit · Report #173412

Full Sub Domain Takeover at s3.websummit.net

Validstatus

5upvotes

2 Feb 2017disclosed

How it was found

Hey

The sub domain at s3.websummit.net is pointing to dws-content.s3-website-eu-west-1.amazonaws.com.

http://s3.websummit.net/

404 Not Found

    Code: NoSuchBucket
    Message: The specified bucket does not exist
    BucketName: s3.websummit.net
    RequestId: DB4C92F0D805D3F3
    HostId: NdSB/5EgNAiQz7B2pjzfBy5QwA6977cvAroA5vCyqfSsPR3nZLgdEyv4vQA4NCISzpILKP0WddM=

This means that the bucket has now expired and this can now be claimed and content can be hosted on behalf of http://s3.websummit.net/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original