HexBrain

Algolia · Report #673273

subdomain take over at recommendation.algolia.com

Validstatus
mediumseverity
27upvotes
14 Aug 2019disclosed

How it was found

Description

hello sir, your subdomain recommendation.algolia.com cname is recommendation.us and recommendation.us is for sell which can lead to subdomain take over

steps to reproduce

  1. check the cname of recommendation.algolia.com
  2. see that the cname "recommendation.us" is for sell using lookup tool

poc:

{F555251}

Impact

Attackers are able to purchase recommendation.us then they will be able to takeover recommendation.algolia.com and post porn pictures or phishing forums

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original