Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Domain.com #17

Open
indianajson opened this issue Jun 9, 2021 · 0 comments
Open

Domain.com #17

indianajson opened this issue Jun 9, 2021 · 0 comments
Labels
Vulnerable This service is vulnerable to takeover.

Comments

@indianajson
Copy link
Owner

Service Domain.com

Status Vulnerable

Nameserver

ns1.domain.com
ns2.domain.com

Explanation

Per Domain.com's Knowledge Base you can add external domains if you have an existing account or if you purchase something (like hosting). As it turns out Domain.com owns 000domains.com and dotster.com, which means creating a zone on domain.com will active a zone automatically on the other two services as well.

Needs Verification? Yes

While the documentation supports the belief that takeover is possible and their system uses the same backend as Bizland and MyDomain (which are vulnerable). We do need someone to verify that takeover is possible.
@indianajson indianajson added the Vulnerable This service is vulnerable to takeover. label Jun 9, 2021
@indianajson indianajson changed the title Domain.com - Vulnerable Domain.com Jun 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Vulnerable This service is vulnerable to takeover.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@indianajson