Back to directory
WRITEUP #1198

Subdomain Takeover leading to Full Account Takeover

AI / LLMSubdomain takeoverAccount takeoverASP.NET
by@H4cktus(Hacktus)
Bounty
3,000
Program
-
Published
May 8, 2023
Added to HackDex
Jul 17, 2023
Read Full Writeuphttps://hacktus.tech/subdomain-takeover-leading-to-full-account-takeover
RELATED WRITEUPS
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Self-XSS to ATO via Site Features
XSSSelf-XSS
Unmasking Harmful Content in a Medical Chatbot: A Red Team Perspective
AI / LLMAI
Revival Hijack – PyPI hijack technique exploited in the wild, puts 22K packages at risk
AI / LLMCI/CD
CSRF Bypass Using Domain Confusion Leads To ATO
CSRFAccount takeover

Built with ❤️ by Shubham Rawat