Subdomain Takeover via Heroku

  • Reported to Private
  • Reported by Haqtify
  • Medium (6)
  • $400
  • Published 4 months ago
  • No Likes

URL :

http://napagetaway.redacted.com/

Possible To Takeover Hint:

Steps To Reproduce:

1.Create a new app. New App name same as expire domain name DNS.

https://dashboard.heroku.com/new-app

 

2. After created goto APP and then settings.

https://dashboard.heroku.com/apps/[APP-NAME]/settings

3. Now goto Domain section and Add Domain.

4. Now Add Expired Domain in it.

5. Domain Takeover Successfully.