pentester.land· Aug 15, 2021· by Alun Jones (@ftp_alun)

Second Order Subdomain Takeovers – They DO Exist!

Target Program: Microsoft

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Subdomain takeover#Broken link hijacking