Subdomain Takeover via Heroku

  • Reported to Private
  • Reported by Haqtify
  • Medium (6)
  • $400
  • Published 3 years ago
  • No Likes


Possible To Takeover Hint:

Steps To Reproduce:

1.Create a new app. New App name same as expire domain name DNS.


2. After created goto APP and then settings.[APP-NAME]/settings

3. Now goto Domain section and Add Domain.

4. Now Add Expired Domain in it.

5. Domain Takeover Successfully.