Thread by @0xAsm0d3us

A thread 🧵 on DNS misconfigurations/resources/articles/tools 👇

#hacking #cybersecurity #dns #bugbounty

The History of DNS Vulnerabilities and the Cloud (by Palo alto networks)

unit42.paloaltonetworks.com/dns-vulnerabil…

Dangling Domains: Security Threats, Detection and Prevalence (by Palo alto networks)

unit42.paloaltonetworks.com/dangling-domai…

Fishing the AWS IP Pool for Dangling Domains (by Bishop Fox)

bishopfox.com/blog/fishing-t…

Respect My Authority – Hijacking Broken Nameservers to Compromise Your Target (by Matthew Bryant)

thehackerblog.com/respect-my-aut…

The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace, and Digital Ocean (by Matthew Bryant)

thehackerblog.com/the-orphaned-i…

The .io Error – Taking Control of All .io Domains With a Targeted Registration (by Matthew Bryant)

thehackerblog.com/the-io-error-t…

The International Incident – Gaining Control of a .int Domain Name With DNS Trickery

thehackerblog.com/the-internatio…

AppSec EU 2017 DNS Hijacking Using Cloud Providers: No Verification Needed (by Frans Rosén)

Hostile Subdomain Takeover using Heroku/Github/Desk + more (by Detectify)

labs.detectify.com/2014/10/21/hos…

Subdomain Takeover: Basics (by Patrik Hudak)

0xpatrik.com/subdomain-take…

Subdomain Takeover: Finding Candidates (by Patrik Hudak)

0xpatrik.com/subdomain-take…

Subdomain Takeover: Proof Creation for Bug Bounties (by Patrik Hudak)

0xpatrik.com/takeover-proof…

Subdomain Takeover: Going beyond CNAME (by Patrik Hudak)

0xpatrik.com/subdomain-take…

Subdomain Takeover: Thoughts on Risks (by Patrik Hudak)

0xpatrik.com/subdomain-take…

Dangling DNS: Amazon EC2 IPs (Current State) (by Mohamed Elbadry)

blog.melbadry9.xyz/dangling-dns/a…

Eliminating Dangling Elastic IP Takeovers with Ghostbuster (by Assetnote)

blog.assetnote.io/2022/02/13/dan…

[Tool] Ghostbuster (by Assetnote)

github.com/assetnote/ghos…

Prevent dangling DNS entries and avoid subdomain takeover (by Microsoft)

docs.microsoft.com/en-us/azure/se…

Internet-Wide Analysis of Subdomain Takeovers (by Red Hunt Labs)

redhuntlabs.com/blog/project-r…