Вопрос по доменам

[xcvsd]

Интересует вопрос, есть ли возможность угнать домен? Например подменить ДНС. Если да, то каким образом? (Я в хаке практически ноль) Если вопрос глупый, извиняюсь. Вопрос появился, после недавнего угона домена Galxe, где хакеру удалось украсть более 200к$ дрейнером (Ангел, привет) При этом домен долгое время не могли восстановить.. Мне для общего развития)

 

[guslik_reborn]

A Guide to DNS Takeovers: The Misunderstood Cousin of Subdomain Takeovers

Introduction Let's start with this: A DNS takeover is not the same as a subdomain takeover. Subdomain takeovers are old news. Hackers who caught onto them early made busloads of bounties by automating their detection and exploitation. They're still out there, but competition is fierce. Crafty...

blog.projectdiscovery.io

Using PD tools to find my first subdomain takeover

Since joining PD in December, I've been learning a lot about our community and what it takes to be a modern security engineer. One of the biggest lessons I think I've learned is: 🤔To be a great defender, you have to think like an attacker Gone are the days when

blog.projectdiscovery.io

 

[xusernamex666]

1 of possible vectors:
you can buy domain from from godaddy, namecheap etc -> if you have access you can change dns to point to your server
or you can perform domain transfer for example

 

[solomonfinik]

Возможно через хостера типа namecheap godaddy но хз

 

[highlvl]

Интересная тема, жду ответов

 

[hackeryaroslav]

Domain/Subdomain takeover - HackTricks

book.hacktricks.xyz