1398960 - Subdomain Takover of devs.mozillaindia.org

Status: RESOLVED FIXED

(Websites :: Mozilla Community Sites, enhancement)

Description

[Aditya Agrawal]

Hi there,

I have found that devs.mozillaindia.org was vulnerable to subdomain takeover, so i have taken over that subdomain to prevent any malicious person to takeover.

Let me explain in detail.

1. devs.mozillaindia.org was pointing Github pages but devs.mozillaindia.org was not claimed on Github pages, that is why it was possible for anyone to takeover this subdomain.
2. I have created a private reporsitory https://github.com/exploitprotocol/devs.mozillaindia.org( if you want i can send an invite to view the content), and then claimed the subdomain.

To prove subdomain takeover you can find a file http://devs.mozillaindia.org/subdomaintakeover.html with text "Subdomain Takeover of devs.mozillaindia.org". 

Thanks

Comment 1

[Aditya Agrawal]

Attachment: Before Takeover of devs.mozillaindia.org

Comment 2

[Aditya Agrawal]

Attachment: After Takeover devs.mozillaindia.org

Comment 3

[Greg G]

Thanks Aditya!

Confirmed. This is listed as a community site: https://wiki.mozilla.org/Websites/Directory#M

Comment 4

[Greg G]

Assigning sec-high for subdomain takeover. 

Community sites are excluded from the bug bounty: https://www.mozilla.org/en-US/security/web-bug-bounty/

:yalam96 can you handle this or route it to the right people?

Comment 5

[Yousef Alam [:yalam96] (use NEEDINFO)]

Tanner will take this one on

Comment 6

[Yousef Alam [:yalam96] (use NEEDINFO)]

(keeping NI on myself so I remember to follow up)

Comment 7

[Greg G]

Dropping to sec-moderate since I was told community sites don't offer an org wide threat.

Thanks :yalam96 and :tanner, looks like this is fixed, since I'm not seeing the CNAME to mozillaindia.github.io anymore.

Comment 8

[Tanner Filip [:tanner]]

I've changed the DNS of the site to point to MDN. If they want to use GH Pages they'll have to get in contact with me or yousef to make appropriate changes.

Comment 9

[Greg G]

Great, thanks :tanner!