subdomain takeover at FeedPress not working
sumgr0 opened this issue · comments
Service name: FeedPress
Documentation
Based on the information shared in the hackerone report for FeedPress based subdomain, not able to takeover the ownership. The error message on the URL stated:
FeedPress
The feed has not been found.
You have a blog or a website? Let us handle your RSS feeds.
After creating the account on feedpress, and trying to takeover the subdomain by selecting My Hostname and entering the programs sub-domain, it results in the error message - "The hostname xyz.domain.com is already registered on FeedPress."
Is the sub-domain takeover in such scenario possible?
Thanks
Sometimes the error isn't truly indicative of being able to perform a takeover.
Eg.
This site indicates an error, suggesting that the sub-domain takeover is possible.
However, these sites are completely valid indicating that the domain is actually in use in a way that can't be compromised.
- https://feed.gradle.org/blog.atom
- https://feed.gradle.org/blog/features.atom
- https://feed.gradle.org/blog/events.atom
- https://feed.gradle.org/blog/general.atom
All of this being said, the general security of FeedPress isn't all that good. I've been trying to get in contact with their team about other security problems with their site and they aren't responding. Honestly, I would recommend not trusting FeedPress with access to one of your sub-domains as their security practices don't seem to be all that good.
Hello, FeedPress appears to be no longer vulnerable.
The hostname xx.target.com is already registered on FeedPress.
Thanks
I confirm feedpress is not vulnerable. Testing on few domains.
Not vulnerable. Also received a
The hostname xx.target.com is already registered on FeedPress.