Domain IP Mismatch + Information Disclosure + Content Spoofing Leads to $100

Jun 24, 2024 2 min read Utsavpari Gosai

Hello Hackers,

I hope you are all doing well. It's been a long time since we last connected, and I apologize for that. My studies have been keeping me busy. As I mentioned in a previous article, I am pursuing an MCA, and my studies, college projects, assignments, exams, and my ethical hacking and pentesting internships have occupied a lot of my time.

However, I am pleased to share that my second-semester exams are over, and the results are out. I passed with first-class distinction, achieving a 9.4 SGPA. Now that I have some free time, I can return to bug hunting and writing articles. So, let's dive in! 💻✨

After finishing my college exams, I grabbed my laptop, opened Kali Linux, and re-entered my world of hacking. Although I can't disclose the site's name, I'll refer to it as target.com. Using the Subfinder tool, I found a subdomain named logintest1.target.com. Visiting this subdomain, I initially found nothing.

Then, I performed directory brute-forcing using the Dirsearch tool. I discovered an error message at /test. When I visited this, I encountered a .NET error disclosing the .NET version used by the server, along with internal directory information, paths, and other sensitive data.

The /test directory also reflected data. I first attempted an XSS attack, but the input was properly encoded. However, I remembered that content spoofing wasn’t listed as out-of-scope, so I included it in my report.

Next, I searched Censys for IPs of the target and found a mismatch between the domain and its actual IP classic domain IP mismatch. Without delay, I documented everything, wrote a detailed report with PoCs, and submitted it.

After 20 to 25 days of evaluation, the program accepted the report, resolved the issue, and awarded me a $100 bounty! 🎉



Takeaways:

  • Always check for IP mismatches it can reveal unintended behavior or exposures.
  • Content spoofing may seem minor, but when paired with info disclosure, it becomes valuable.
  • Celebrate small wins and learn from each report you write!

Thank You,
MR.X FACTOR

🔗 Handles:

← Back To Homepage