NS1
indianajson opened this issue · comments
Service NS1
Status Vulnerable
Nameservers
dns1.p**.nsone.net
dns2.p**.nsone.net
dns3.p**.nsone.net
dns4.p**.nsone.net
Explanation
If you have an NS1 account head into the control panel. Creating a new zone for your domain (assuming the zone is available to register) will perform the takeover. The nameservers do not need to match. For example, even if the nameserver on the domain is dns4.p05.nsone.net, but your zone is dns4.p03.nsone.net the takeover will still work.
False Positives
If you get an error that says "FQDN is used by multiple zones" that means it is already in someone else's accounts. You cannot takeover subdomains of root domains that already have zones. This is not due to this being an edge case, this is simply how DNS works.
Assistance with Takeovers
If you need help with a takeover now that NS1 no longer offers free accounts, DM me on Twitter then post a comment here (cause my Twitter notifications are broken) and I'll try to help.
still Vulnerable ?
Yes, it is still vulnerable.
@atastycookie There are more false positives due to NS1's safety checks, but I can confirm the issue is not fixed.
Anyone had any success with this?
No more free accounts :(
hi @indianajson can you give me a hand with a takeover PoC on NS1? Cheers
hi @indianajson can you give me a hand with a takeover PoC on NS1? Cheers
I got an account, I can help you if you still need help.
@FalcoXYZ Hello, can you give me a hand with a takeover PoC on NS1?
Yes, send me a message on Twitter/X: https://x.com/FalcoXYZ
@FalcoXYZ Hello, can you give me a hand with a takeover PoC on NS1?
Yes, send me a message on Twitter/X: https://x.com/FalcoXYZ
@FalcoXYZ Sorry, I am not a Premium member of Twitter. I cannot send you messages. Can I send it to you in other ways? like email?
@FalcoXYZ Hello, can you give me a hand with a takeover PoC on NS1?
Yes, send me a message on Twitter/X: https://x.com/FalcoXYZ
@FalcoXYZ Sorry, I am not a Premium member of Twitter. I cannot send you messages. Can I send it to you in other ways? like email?
Telegram? It's: FalcoXYZ
I need an account to do some testing!
Who can help ?
I need an account to do some testing!
Who can help ?
Nevermind, got an account, hit me up if you need to test some cases.