Shopify is vulnerable by a New FingerPrint about can-i-take-over-xyz HOT 15 CLOSED

Hello @codingo
I managed to takeover a subdomain, I had this fingerprint "Only one step left!
To finish setting up your new web address, go to your domain settings, click "Add existing domain", and enter: yourdomainname

Verify if the name of the store is available or not
Add your domain without the www's under Online store > Domains.

https://medium.com/@thebuckhacker/how-to-do-55-000-subdomain-takeover-in-a-blink-of-an-eye-a94954c3fc75

from can-i-take-over-xyz.

This isn't really a new fingerprint, it's an edge case. Tested this now and it requires the store to be created, but never linked to the domain. Even if the shop is in the portal with a status of "not connected" (i.e. added to any account in advance of DNS), it can not be taken over.

Going to call this an edge case since there's some truth to it, but I think it's a fairer assessment to say it's not vulnerable as it's such an unlikely scenario that somebody would point DNS before adding their domain into their account.

from can-i-take-over-xyz.

Just took over a subdomain with "Only one step left" fingerprint. Same procedure as Mouja0412

from can-i-take-over-xyz.

Shopify is Still Vulnerable ❤️

from can-i-take-over-xyz.

"Upon visiting the domain, I received the message "Sorry, this store is currently unavailable." However, Shopify indicates that the same domain, flagged as vulnerable to takeover by Nuclei, is currently in use. Can someone clarify this discrepancy and its implications for subdomain takeover?

from can-i-take-over-xyz.

Resolved in #52

from can-i-take-over-xyz.

hello @codingo,

I have found several subdomains that had the fingerprints:

Sorry, this shop is currently unavailable.

But when visiting the CNAME, it showed a perfectly working shop in shopify.

So shop.example.com was giving me "shop is currently unavailable" but when visiting example.myshopify.com it was a perfectly working shop.

Is this still vulnerable?

from can-i-take-over-xyz.

I tookover a domain like the example above as well.

from can-i-take-over-xyz.

I just managed to takeover subdomain with fingerprint "Only one step left!

from can-i-take-over-xyz.

I did the same as explained above ? will this be accepted?

from can-i-take-over-xyz.

I recently had a subdomain takeover on Shopify as well as described above

from can-i-take-over-xyz.

Date: 04/09/2022

I takeover one.

from can-i-take-over-xyz.

I take over a subdomain called: https://shop.target.de/ and It has all the mentioned fingerprints.

from can-i-take-over-xyz.

.

from can-i-take-over-xyz.

Shopify is not vulnerable to Subdomain Takeover anymore right? Because i faced this message in the photo, when i tried to takeover a subdomains

from can-i-take-over-xyz.