Ravi Sir's Cyber Security Cards › Interview Cards
How do you explain subdomain takeover at a conceptual level?
How do you explain subdomain takeover at a conceptual level? If a DNS record points to a cloud resource you deleted, someone else can claim it and host content on your hostname. A CNAME points to an old cloud app you removed; an attacker recreates that app and now controls the subdomain. “I inventor
Read card text
What this card says
Short answer
If a DNS record points to a cloud resource you deleted, someone else can claim it and host content on your hostname.
Example
A CNAME points to an old cloud app you removed; an attacker recreates that app and now controls the subdomain.
Say it in the interview
“I inventory DNS, remove stale records, and monitor, so no record points to nothing.”
Why it matters
Your own trusted hostname could serve an attacker’s phishing page.
Learn more in the lesson: 46.5 Domains, S3, RDS and Live-Project Security Questions