Feed
Discussion
Sep 17, 2024
Account Takeover due to DNS Rebinding
Hello guys, after a long time, I decided to write a blog post. I chose a vulnerability that I recently uncovered in Hashnode. As you may have already noticed, I set up this blog on Hashnode. Naturally, when I use a third-party service like this, I sp...
blog.voorivex.team5 min read
Responses(3)
nice writeup , thanks for sharing
I have a question : so if the next_check() checks (verify) the cname record every time (when function called) and if it matches "hashnode.network" it will prevent this attack ?
and the cause of this vulnerability is because hashnode only verifies the cname record once , only when it is adding to the db, , am I correct?🤔
rootface
cool