Subdomain takeover on *.apachecn.org

## Summary

The domain **apachecn.org.io** has a subdomain wildcard CNAME record pointing to **apachecn.github.io**. This allows an attacker to use any subdomain he wants on apachecn.org with Github pages.

## Security issue

An attacker could create it's own repository and configure it to use any subdomain he wants, allowing him to serve it's own content.

## POC

I have made [a POC](http://what-i-want.apachecn.org/).


## Remediation

Remove the wildcard CNAME record for apachecn.org.

## Impact

This issue make it possible for an attacker to carry out several type of attacks like XSS, phishing campaign or session hijacking.

Comece revisando a configuração CNAME curinga descrita na issue e a prova de conceito vinculada em what-i-want.apachecn.org. Confirme se apachecn.org ainda roteia subdomínios arbitrários para apachecn.github.io; considera-se concluído quando o registro CNAME curinga é removido e o subdomínio da prova de conceito não serve mais conteúdo controlado por um invasor.

Escrita pelo modelo de indexação a partir do texto da issue.