Subdomain Takeover due to ████████ NS records at us-east4.37signals.com
Medium
B
Basecamp
Submitted None
Actions:
Reported by
nagli
Vulnerability Details
Technical details and impact analysis
## Description
Hi!
I have discovered that us-east4.37signals.com was pointing to an unclaimed ████ NS zone and I've managed to claim it in my account.
##POC
http://nagli.us-east4.37signals.com/takeover.html
{F1451587}
## Remediation
Make sure to configure the DNS records under us-east4.37signals.com
Best regards,
@ nagli
## Impact
Subdomain takeovers can be used for
Account takeovers (cookies set to .█████████ will be shared with this subdomain and can be obtained)
Stored XSS (arbitrary javascript code can be executed in a users browser)
Phishing
Hosting malicious content
Since you cannot control the content hosted on the site, your brand is at risk of being damaged.
Additionally, the vulnerabilities in these sites, such as XSS, RCE, etc could put your sites/users at risk of attack, since they would occur on your domain.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Information Disclosure