Owner

EdOverflow

5 indexed repositories · View on GitHub

bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.

6553 stars
can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Python · 5812 stars
contact.sh
An OSINT tool to find contacts in order to report security vulnerabilities.

Shell · 268 stars
legal-bug-bounty
#legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.

75 stars
h1-cli
A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.

Shell · 41 stars

Open All

212 open issues indexed

Flywheel Open

vulnerable

EdOverflow/can-i-take-over-xyz#242 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Alchemer.com - needs testing Open

not vulnerable

EdOverflow/can-i-take-over-xyz#246 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
AWS API-Gateway Open

not vulnerable

EdOverflow/can-i-take-over-xyz#247 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
UNbounce Open

question

EdOverflow/can-i-take-over-xyz#251 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
How can I takeover cloudapp.azure.com services Open

question

EdOverflow/can-i-take-over-xyz#255 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
AWS IP TAKEOVER Open

question

EdOverflow/can-i-take-over-xyz#256 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Gitbook Subdomain takeover Open

vulnerable

EdOverflow/can-i-take-over-xyz#259 · 4 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Is cname at cdn77 vulnerable? Open

needs more info question

EdOverflow/can-i-take-over-xyz#264 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
AZURE IS NOT VULNERABLE Open

needs more info

EdOverflow/can-i-take-over-xyz#266 · 3 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
Cargo collective subdomain takeover Open

EdOverflow/can-i-take-over-xyz#268 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
OpenShift Takeover Open

EdOverflow/can-i-take-over-xyz#271 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is adobe-campaign.com vulnerable? Open

EdOverflow/can-i-take-over-xyz#272 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is lync.com takeover possible? Open

EdOverflow/can-i-take-over-xyz#273 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is online-metrix.net vulnerable? Open

EdOverflow/can-i-take-over-xyz#274 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Campaign Monitor takeover PoC Open

EdOverflow/can-i-take-over-xyz#275 · 2 comments · 5 reactions · 0 assignees · Indexed Sep 15, 2026
Google Sites Open

not vulnerable

EdOverflow/can-i-take-over-xyz#277 · 0 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Can I this subdomain takeover Open

question

EdOverflow/can-i-take-over-xyz#280 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
MAXCDN Open

question

EdOverflow/can-i-take-over-xyz#303 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Meteor cloud (galaxy) Open

vulnerable

EdOverflow/can-i-take-over-xyz#321 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Tave takeover Open

needs confirmation

EdOverflow/can-i-take-over-xyz#323 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Jazzhr Open

needs confirmation

EdOverflow/can-i-take-over-xyz#330 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Subdomain Takeover via Flowcode Open

not vulnerable

EdOverflow/can-i-take-over-xyz#347 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
are any of these vulnerable? Open

question

EdOverflow/can-i-take-over-xyz#348 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Instapage is still vulnerable in some cases, Edge Case change suggestion Open

EdOverflow/can-i-take-over-xyz#349 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
how can i check if domain vunerable? Open

needs more info question

EdOverflow/can-i-take-over-xyz#350 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is it possible to takeover the subdomains which are pointing on cname *.txproxy.com Open

question

EdOverflow/can-i-take-over-xyz#351 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
abc.com.edgekey.net Open

question

EdOverflow/can-i-take-over-xyz#355 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
404 Not Found. nginx? Open

question

EdOverflow/can-i-take-over-xyz#356 · 1 comment · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Useresponse Subdomain Takeover Open

EdOverflow/can-i-take-over-xyz#357 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Amazon Cognito subdomain takeover Open

EdOverflow/can-i-take-over-xyz#358 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
in.gl Open

EdOverflow/can-i-take-over-xyz#362 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is Tally takeover possible? Open

question

EdOverflow/can-i-take-over-xyz#363 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
How to inject page to domain with ns godaddy and a record from inmotion? Open

question

EdOverflow/can-i-take-over-xyz#365 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Github DNS Check Successful Error Open

question

EdOverflow/can-i-take-over-xyz#366 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Better Uptime Open

EdOverflow/can-i-take-over-xyz#368 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
splashthat.com not vulnerable Open

not vulnerable

EdOverflow/can-i-take-over-xyz#371 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Subdomain Takeover via Refined.com service Open

EdOverflow/can-i-take-over-xyz#376 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Subdomain takeover via bubble.io Open

vulnerable

EdOverflow/can-i-take-over-xyz#382 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is salesforcce subdomains are vulnerable to takeover Open

question

EdOverflow/can-i-take-over-xyz#385 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
heroku deploying doesn't work Open

EdOverflow/can-i-take-over-xyz#386 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Few services that are not being detected on can-i-take-over-xyz Open

EdOverflow/can-i-take-over-xyz#389 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Squarespace Subdomain Takeover on EdgeCase as Domain Not Claimed Open

EdOverflow/can-i-take-over-xyz#390 · 2 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
(Page Not Found) pointing to cdne-myjls-admin-int.azureedge.net ( IS THIS VULNERABLE??) Open

question

EdOverflow/can-i-take-over-xyz#391 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
is this vulnerable? Open

question

EdOverflow/can-i-take-over-xyz#392 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is mailgun.org still vulnerable?? Open

question

EdOverflow/can-i-take-over-xyz#393 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
(404 Web Site not found) Microsoft Azure vulnerable? Open

question

EdOverflow/can-i-take-over-xyz#394 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is fillout.com vulnerable? Open

EdOverflow/can-i-take-over-xyz#395 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Gemfury fingerprint is very prone to false positiver Open

EdOverflow/can-i-take-over-xyz#396 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
cannot set a custom domain at this time. Open

EdOverflow/can-i-take-over-xyz#397 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
squadcast subdomain takeover Open

EdOverflow/can-i-take-over-xyz#398 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026

EdOverflow

Get new issues in your inbox