jake/jarv.is
1
Fork 0
mirror of https://github.com/jakejarvis/jarv.is.git synced 2026-10-19 23:36:24 -04:00
Code Issues Activity

linked images produced invalid HTML, fix later

Browse Source
This commit is contained in:
jake committed 2019-12-21 11:59:43 -05:00
1 parent 6ae5aeb3e3
commit 762a82b3cb
5 files changed
+6 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

content/notes/finding-candidates-subdomain-takeovers/index.md
+1 -1
View File
@@ -16,7 +16,7 @@ A **subdomain takeover** occurs when a subdomain (like *example*.jarv.is) points
Not only are takeovers a fun way to dip your toes into [penetration testing](https://www.cloudflare.com/learning/security/glossary/what-is-penetration-testing/), but they can also be incredibly lucrative thanks to [bug bounty programs](https://en.wikipedia.org/wiki/Bug_bounty_program) on services like [HackerOne](https://hackerone.com/hacktivity?order_direction=DESC&order_field=popular&filter=type%3Aall&querystring=subdomain%20takeover) and [Bugcrowd](https://bugcrowd.com/programs), where corporations pay pentesters for their discoveries.
[{{< image src="images/hackerone-2.png" width="620" >}}[Huge rewards for subdomain takeovers on HackerOne.](https://hackerone.com/hacktivity?querystring=subdomain%20takeover){{< /image >}}](https://hackerone.com/hacktivity?querystring=subdomain%20takeover)
{{< image src="images/hackerone-2.png" width="620" >}}[Huge rewards for subdomain takeovers on HackerOne.](https://hackerone.com/hacktivity?querystring=subdomain%20takeover){{< /image >}}
For a deep dive on the implications of takeovers, which can be a pretty serious vector of attack for malicious actors to obtain information from users of the targeted company, [Patrik Hudak](https://twitter.com/0xpatrik) wrote a [great post here](https://0xpatrik.com/subdomain-takeover/). Definitely take some time to skim through it and come back here when you're ready to hunt for a potential takeover yourself.