HexBrain

X / xAI · Report #42236

URGENT - Subdomain Takeover on users.tweetdeck.com , the same issue of report #32825

Validstatus
$420bounty
4upvotes
1 Jan 2015disclosed

How it was found

hi twitter security team .

This is an urgent issue the same of report #32825 Your subdomain users.tweetdeck.com is pointing to AWS S3, but no bucket was connected to it. an attacker can claim the domain and takeover the full subdomain.

Please fix it as soon as possible , and let me know if you need any further information .

missoum best regards

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original