AdguardTeam / AdguardTeam/AdGuardDNS

Many Hijacked Subdomains

未關閉
#740 6 則留言 1 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
Go
星號
952
分支
82
PR 合併指標
30 天內沒有已合併 PR

描述

### Prerequisites

- [X] I checked the documentation and found no answer;
- [X] I checked to make sure that this issue has not already been filed;
- [X] This is not an ad/bug report.

### Problem description

_N.B.: Reposting https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/572 from 3ya (!) for increased visibility._

According to another in a long-term series of articles, various subdomains of a number of Microsoft-owned domains have been hijacked.

[_Seizing subdomains. How I took over Microsoft subdomains and how to perform such attacks_](https://hackmag.com/security/subdomain-interception/) → https://github.com/EdOverflow/can-i-take-over-xyz has quite a lot of details re: & especially combatting this. _Some_ of the problem involves CNAME hacking.

Hard lists of such seem difficult to find, but https://www.google.com/search?q=hijacked%20microsoft%20domains seems to give more pieces to the puzzle. _(Perhaps whenever DNSSEC is widely deployed this'll no longer be an issue.)_

### Proposed solution

🤷🏾‍♂️ I'm hoping you experts can come up w/ a good solution.

### Additional information

Thanks to @DandelionSprout for reminding me to followup on this.

貢獻指南

這個儲存庫沒有索引到貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。