1. DNS/lame_delegation/Subdomain_Takeover

について、ここに記述してください。

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

https://github.com/pwnesia/dnstake

https://www.reddit.com/r/netsec/comments/pd7oed/dnstake_a_fast_tool_to_check_missing_hosted_dns/

What is a DNS takeover?

DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has 
its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) 
but the hosted zone has been removed or deleted. 

Consequently, when making a request for DNS records the server responds with a SERVFAIL error. 
This allows an attacker to create the missing hosted zone on the service that 
was being used and thus control all DNS records for that (sub)domain.¹

MoinQ: DNS/lame_delegation/Subdomain_Takeover (last edited 2024-06-15 23:31:22 by ToshinoriMaeno)