EdOverflow/can-i-take-over-xyz

Is uservoice subdomain takeover possible?

1nc0gn170 opened this issue · 4 comments

1nc0gn170 commented

I have found a program where website its response is 404 and Its Cname is pointing to uservoice.com.
I didn't find any registration portal for that site.

;; ANSWER SECTION:
mywebsite.com. 299 IN	CNAME	mywesbsite.uservoice.com.

Screenshot from 2020-08-21 14-44-19

Anyone Help me please

HammyHavoc commented

Wondering this myself as a former UserVoice user. CC @austintaylor @attack7 @hoffoo

  • 😄1
hoffoo commented

@n41n4 @HammyHavoc

It is not possible - subdomain cnames are unique and cannot be reused

  • ❤️1
HammyHavoc commented

@n41n4 @HammyHavoc

It is not possible - subdomain cnames are unique and cannot be reused

Thanks for that! Thought as much. I had somebody reach out asking for a bug bounty reward in exchange for this "information".