Subdomain Takeover via HubSpot about can-i-take-over-xyz HOT 10 OPEN

This is no longer possible.

from can-i-take-over-xyz.

@m7mdharoun I'm pretty familiar with this one and somewhat doubt your claim. Could you please provide a link to your more recent issue (if disclosed) or at minimum some further information?

from can-i-take-over-xyz.

@codingo I've disclosed the Bug Report but without the premssion of PayPal So someone report Hackerone Support and They warning me Poc here

FingerPrint : Domain Not found

from can-i-take-over-xyz.

Excellent, thank-you for the prompt response. I'll update the repo shortly.

from can-i-take-over-xyz.

@codingo Please check your twitter messages I've sent you the POC link

from can-i-take-over-xyz.

Hi, another example here:

https://hackerone.com/reports/407355

(He didn't say it was "Hubspot", but he said "this report is same as of this one:- https://hackerone.com/reports/38007"

from can-i-take-over-xyz.

Here is a recent example, but it contains few details about the PoC: https://hackerone.com/reports/335330

from can-i-take-over-xyz.

Both examples above were reports written 2 years ago, but disclosed recently.

from can-i-take-over-xyz.

@soareswallace Ah yes, I had overlooked that. Thanks.

from can-i-take-over-xyz.

Halo, i discovered a domain connect the hubspot but went i regist it the domain i want to takeover is request the verification, is still vuln or no?

from can-i-take-over-xyz.