jake/jarv.is
1
Fork 0
mirror of https://github.com/jakejarvis/jarv.is.git synced 2026-08-10 21:15:21 -04:00
Code Issues Activity

pass mdx images through next/image for full optimization benefits

Browse Source
This commit is contained in:
jake
2022-01-09 22:53:10 -05:00
parent 32d1683e51
commit 6436a34c59
34 changed files with 256 additions and 180 deletions
Download Patch File Download Diff File Expand all files Collapse all files
notes/finding-candidates-subdomain-takeovers.mdx
+3 -1
View File
@@ -11,12 +11,14 @@ tags:
image: "/static/images/notes/finding-candidates-subdomain-takeovers/hackerone-2.png"
---
import Image from "./components/embeds/Image";
A **subdomain takeover** occurs when a subdomain (like _example_.jarv.is) points to a shared hosting account that is abandoned by its owner, leaving the endpoint available to claim for yourself.
Not only are takeovers a fun way to dip your toes into [penetration testing](https://www.cloudflare.com/learning/security/glossary/what-is-penetration-testing/), but they can also be incredibly lucrative thanks to [bug bounty programs](https://en.wikipedia.org/wiki/Bug_bounty_program) on services like [HackerOne](https://hackerone.com/hacktivity?order_direction=DESC&order_field=popular&filter=type%3Aall&querystring=subdomain%20takeover) and [Bugcrowd](https://bugcrowd.com/programs), where corporations pay pentesters for their discoveries.
<figure>
<img
<Image
src="/static/images/notes/finding-candidates-subdomain-takeovers/hackerone-2.png"
width="620"
height="347"