πNew WriteupβοΈ
βββββββββββββββ
πDate: Sun, 09 Jul 2023 21:02:53 GMT
βββββββββββββββ
βοΈTitle: Host Header ManipulationsβββPassword reset poisoning via dangling markup
βββββββββββββββ
πLink: https://medium.com/p/1534cbe903e2
βββββββββββββββ
Tags: #cross_site_scripting #dangling_markup #hacking #host_header_injection #portswigger
βββββββββββββββ
πDate: Sun, 09 Jul 2023 21:02:53 GMT
βββββββββββββββ
βοΈTitle: Host Header ManipulationsβββPassword reset poisoning via dangling markup
βββββββββββββββ
πLink: https://medium.com/p/1534cbe903e2
βββββββββββββββ
Tags: #cross_site_scripting #dangling_markup #hacking #host_header_injection #portswigger
Medium
Host Header ManipulationsβββPassword reset poisoning via dangling markup
I tried several methods but I will cover the solution and the logic of the beyond. The things is happening on the raw part of the mailβ¦
β€· Title: Subdomain Takeovers: A Growing Supply Chain Threat
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 15 Apr 2025 00:10:23 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Cloud Security #cybersecurity #Dangling DNS #dns #Subdomain takeover #Supply Chain
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 15 Apr 2025 00:10:23 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #Cloud Security #cybersecurity #Dangling DNS #dns #Subdomain takeover #Supply Chain
Daily CyberSecurity
Subdomain Takeovers: A Growing Supply Chain Threat
Subdomain takeovers are evolving into a serious supply chain threat, allowing attackers to inject malicious content.
β€· Title: Password Reset Poisoning via Dangling Markup
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 28 Jul 2025 08:16:37 GMT
ββββββββββββββββββββββββ
β Tags: #password_reset_poisoning #host_header_injection #dangling_markup #account_takeover #bug_bounty
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 28 Jul 2025 08:16:37 GMT
ββββββββββββββββββββββββ
β Tags: #password_reset_poisoning #host_header_injection #dangling_markup #account_takeover #bug_bounty
Medium
Password Reset Poisoning via Dangling Markup
Discover how attackers exploit host header injection and dangling markup to hijack accounts via poisoned password reset emails.
β€· Title: The Invisible Trap: How Hackers Weaponize the Internetβs Root Infrastructure (.arpa) to Bypass Security
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 03 Mar 2026 00:16:25 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #.arpa domain #dangling domains #Domain Hijacking #Infoblox #infosec #infrastructure abuse #IPv6 tunnel #phishing #reverse DNS #TDS #traffic distribution system
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 03 Mar 2026 00:16:25 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #.arpa domain #dangling domains #Domain Hijacking #Infoblox #infosec #infrastructure abuse #IPv6 tunnel #phishing #reverse DNS #TDS #traffic distribution system
Daily CyberSecurity
The Invisible Trap: How Hackers Weaponize the Internetβs Root Infrastructure (.arpa) to Bypass Security
Infoblox uncovers a novel phishing tactic abusing the .arpa TLD. Attackers hijack internet "plumbing" to bypass firewalls and deliver brand-impersonation scams.
β€· Title: Digital Squatters in the Ivory Tower: How βHazy Hawkβ Hijacked Harvard, MIT, and Stanford Subdomains
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 20 Apr 2026 07:58:55 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #.edu domains #CNAME records #cybersecurity #Dangling DNS #DNS hijacking #DNS Sanitation #Hazy Hawk #Higher Education Security #Infoblox #Subdomain Takeover
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 20 Apr 2026 07:58:55 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #.edu domains #CNAME records #cybersecurity #Dangling DNS #DNS hijacking #DNS Sanitation #Hazy Hawk #Higher Education Security #Infoblox #Subdomain Takeover
Penetration Testing Tools
Digital Squatters in the Ivory Tower: How "Hazy Hawk" Hijacked Harvard, MIT, and Stanford Subdomains
A network of American universities has become ensnared in a pervasive assault that targeted not their instructional infrastructures
β€· Title: Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 20 May 2026 07:37:38 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 20 May 2026 07:37:38 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
Penetration Testing Tools
Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection.