Back to directory

WRITEUP #5891

Shipt Subdomain TakeOver via HeroKu ( test.shipt.com )

AI / LLMSubdomain takeover

by@m7mdharon(Mohamed Haron)

Program

Shipt

Published

Aug 1, 2018

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://web.archive.org/web/20201022195925/https://www.mohamedharon.com/2018/08/Shipttakeover.html

▸ RELATED WRITEUPS

Unmasking Harmful Content in a Medical Chatbot: A Red Team Perspective

Revival Hijack – PyPI hijack technique exploited in the wild, puts 22K packages at risk

Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information

Google AI Studio: LLM-Powered Data Exfiltration Hits Again! Quickly Fixed.

From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms

Built with ❤️ by Shubham Rawat