X / xAI · Report #189548

GNIP subdomain take over

Validstatus

highseverity

30upvotes

6 Feb 2017disclosed

Summary

Already received bounties from Twitter for bugs in acquisitions. But not this time because Twitter guys judge this subdomain take over to not be enough critical. Read the full report in case you need my point of view on this.

How it was found

Hello, Your subdomain at blog.gnipcentral.com is not well configured with allows subdomain take over as @fransoren explained in report #145224 .

PoC: Go to http://blog.gnipcentral.com/ , you will be redirected to my domain http://testcloudfrontbug.s3-us-west-2.amazonaws.com/asd/index.html

Please for more information visit the report made by @fransorosen, it's explained with all details possible.

Thanks, Hussein

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original