Bug Bounty: Subdomain Takeover Vulnerability | 2024

Welcome to another cybersecurity exploration! Today, we're diving into the intriguing world of Subdomain Takeover Vulnerability. Imagine this: you're cruising through the web, but lurking beneath the surface lies a potential threat. Subdomain Takeover occurs when a third party seizes control of a subdomain, exploiting it for malicious deeds. It's like someone sneaking into your backyard and setting up camp without your knowledge! Join us as we uncover how this vulnerability works and how to safeguard against it. Stay tuned for insights that will keep you one step ahead in the digital realm!
Website: bepractical.tech
Telegram: telegram.me/be...
Previous Video: • IoT PenTesting: How I ...
The Art Of Web Reconnaissance:
www.udemy.com/...
Hacking Windows with Python from Scratch: www.udemy.com/...
The Ultimate Guide to Hunt Account Takeover:
www.udemy.com/...

[@BePracticalTech]

Here's a challenge for you! Can you takeover this subdomain: takeneover.bepractical.tech? Once you took the subdomain, make sure to post about it on linkedin and mention my linkedin profile so that i can see it!
LinkedIn Profile: www.linkedin.com/in/faiyaz-ahmad-64457520b/

[@user-zf9oe2rw9f]

and its very cool

[@user-ik5xi5yv9y]

so clear and concise. Thankyou

[@ZaraRashidKhan]

Your videos are really informative🙌🏻

[@BePracticalTech]

Thank you!

[@aatankbadboy3941]

Bro are you aware about the information disclosure bug in which .....internal backlog and dashboard items publicly disclosed on Jira without logging in

[@BePracticalTech]

Yes, I am thinking of creating a video on it too

[@saleemahmed8302]

Fabulously explained. Excellent

[@BePracticalTech]

Thank you

[@dhruvdadarwala2045]

very smoothly explanation make some video on how beginner find target for bug hunting

[@BePracticalTech]

Thanks Dhruv!

[@SecureByBhavesh]

Very Informative!

[@BePracticalTech]

Thank you!

[@gg-mr4qr]

love you sir...! waiting for your videos ..... sir please make a video about php vulnerability exploit in WAN.

[@BePracticalTech]

Thank you!

[@ArunR.C]

Really useful your videos ❤

[@BePracticalTech]

Thank you!

[@abduls4479]

Great video, all the best bro

[@BePracticalTech]

Thank you!

[@TheKiddie1-it9dl]

what if they pointed to an an IP

[@uttarkhandcooltech1237]

I am first 🥇 can you provide me your window wallpaper 💗 please

[@gg-mr4qr]

sir's window wallpaper is too cool, right!!!

[@lostInSocialMedia.]

Which virtual debit card you use for international transactions for this purpose

[@BePracticalTech]

I used the virtual card from airtel thanks app

[@Mrkk-iy8jk]

Your videos are simply awesome bruh!!

[@Khalid-bm4fw]

Why you don't use dig cammand to get cname of the subdomain?

[@BePracticalTech]

To answer this question, Please try to run dig on takenover.bepractical.tech and let me know if you are seeing the CNAME record. Thanks

[@CyberWings100]

Nice

[@BePracticalTech]

Thank you

[@hackingdemon0764]

is that free or paid to create a s3 bucket in aws

[@BePracticalTech]

Free

[@milan9093]

Nice one bro. Priority? P2?

[@BePracticalTech]

Depends on the impact. Generally it is p2-p5

[@aatankbadboy3941]

❤

[@BePracticalTech]

😄😄

[@parvejniaj8427]

🇧🇩❤️

[@BePracticalTech]

🇮🇳❤