Skip to content

Subdomain Takeover via Airee.ru #104

@r0hack

Description

@r0hack

Service name

Airee.ru (Russian service) for accelerate and protect website

Proof

  1. Check subdomain
    image
    the service was unpaid

  2. Create account in Airee and add subdomain cdn.site.ru
    image
    successfully added and the service now works and you can see the traffic

  3. We can change and add DNS-records and forwarding to another website and add new subdomain etc.
    image

Metadata

Metadata

Assignees

No one assigned

    Labels

    vulnerableSomeone has provided proof in the issue ticket that one can hijack subdomains on this service.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions