| 4406 | Subdomain Takeover — New Level |
Subdomain takeover |
NA |
Valeriy Shevchenko (@Krevetk0Valeriy) |
Bug Bounty | 2018-12-17 | 2023-06-13 |
| 4303 | Souq.com Subdomain Takeover via jazzhr.com service |
Subdomain takeover |
Souq.com |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-02-15 | 2023-06-13 |
| 4302 | Subdomain Takeover via HubSpot |
Subdomain takeover |
NA |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-02-15 | 2023-06-13 |
| 4299 | Subdomain Takeover via Wufoo Service in a Private Program |
Subdomain takeover |
NA |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-02-16 | 2023-06-13 |
| 4294 | 2 Subdomains Takeover via Unbounce in a Private Program |
Subdomain takeover |
NA |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-02-18 | 2023-06-13 |
| 4283 | Subdomain Misconfiguration lead to AWS S3 Buckets Reader |
Subdomain takeover |
NA |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-02-22 | 2023-06-13 |
| 4160 | Subdomain takeover [Awarded $200] |
Subdomain takeover |
ownCloud |
Friendly (@SkeletorKeys) |
Bug Bounty | 2019-05-07 | 2023-06-13 |
| 4140 | Escalating subdomain takeovers to steal cookies by abusing document.domain |
Subdomain takeover |
Postmates |
Ameya (@iamTakeMyHand) |
Bug Bounty | 2019-05-23 | 2023-06-13 |
| 4033 | How Recon helped me to to find a Facebook domain takeover |
Subdomain takeover |
Meta / Facebook |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2019-07-17 | 2023-06-13 |
| 3995 | From Sub domain Takeover to Open-Redirect |
Subdomain takeover
Open redirect |
NA |
Anil Tom (mr_4nk) |
Bug Bounty | 2019-08-02 | 2023-06-13 |
| 3911 | How I able to Takeover 10 subdomains in a Private Program ? |
Subdomain takeover |
NA |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-09-20 | 2023-06-13 |
| 3821 | Subdomain Takeover via Campaignmonitor.com |
Subdomain takeover |
NA |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2019-11-20 | 2023-06-13 |
| 3778 | How I Took Over 2 Subdomains with Azure CDN Profiles |
Subdomain takeover |
NA |
m0chan (@m0chan98) |
Bug Bounty | 2019-12-16 | 2023-06-13 |
| 3754 | Subdomain takeover via pantheon |
Subdomain takeover |
NA |
Smaran Chand (@smaranchand) |
Bug Bounty | 2019-12-26 | 2023-06-13 |
| 3717 | How i bought my way to subdomain takeover on Tokopedia |
Subdomain takeover |
Tokopedia |
wis4nggeni |
Bug Bounty | 2020-01-20 | 2023-06-13 |
| 3707 | The unexpected bounty: A story of Zendesk takeover on REDACTED.com |
Subdomain takeover |
NA |
wis4nggeni |
Bug Bounty | 2020-01-25 | 2023-06-13 |
| 3604 | My Weirdest Bug Bounty — Getting PII from O365. |
Subdomain takeover |
Microsoft |
Omaid Faizyar (@rulesofthetrade) |
Bug Bounty | 2020-03-14 | 2023-06-13 |
| 3592 | API DOCS takeover on Readme.io |
Subdomain takeover |
NA |
Oktavandi (@0ktavandi) |
Bug Bounty | 2020-03-19 | 2023-06-13 |
| 3522 | Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams |
Account takeover
Subdomain takeover |
Microsoft |
Omer Tsarfati (@OmerTsarfati) |
Bug Bounty | 2020-04-27 | 2023-06-13 |
| 3496 | How we Hijacked 26+ Subdomains |
Subdomain takeover |
NA |
Aishwarya Kendle (@aish_kendle) |
Bug Bounty | 2020-05-07 | 2023-06-13 |
| 3436 | Weird “Subdomain Take Over” pattern of Amazon S3 |
Subdomain takeover |
NA |
Simgamsetti Manikanta (@zaheckmania) |
Bug Bounty | 2020-05-31 | 2023-06-13 |
| 3387 | All *.intercom.help subdomains vulnerable to Subdomain Takeover from intercom Service |
Subdomain takeover |
Intercom |
Mohamed Haron (@m7mdharon) |
Bug Bounty | 2020-06-16 | 2023-06-13 |
| 3358 | Taking over Azure DevOps Accounts with 1 Click |
Subdomain takeover
Account takeover |
Microsoft |
Sean Yeoh (@seanyeoh) |
Bug Bounty | 2020-06-28 | 2023-06-13 |
| 3137 | Dangling DNS: AWS EC2 |
Dangling DNS records
Subdomain takeover |
NA |
Mohamed Elbadry (@_melbadry9) |
Bug Bounty | 2020-09-24 | 2023-06-13 |
| 3060 | Subdomain Takeover in Azure: making a PoC |
Subdomain takeover |
NA |
Diego Bernal Adelantado (@secfaults) |
Bug Bounty | 2020-11-01 | 2023-06-13 |
