Understanding the Security Threats of Esoteric Subdomain Takeover and Prevention Scheme
Sara Mahmoudi Rashid, Md. Imtiaz Kamrul, Asraful Islam · 2019
With the impetuous improvement of cyber intelligence and networking technology, cybersecurity becomes an important area of research. Domain name system (DNS) has been an essential aspect of cyber security and a crucial part of internet services. The nameservers are responsible for the functionality and safety of their corresponding domain names. But due to the laggings of proper security and DNS misconfiguration, there is a chance to takeover subdomain from the assigned external services e.g., cloud platform, e-commerce or content delivery service, which can lead to several high severity risks. Due to trackless and easier exploitation effort, subdomain hijacking has become an alluring attack vector among the hackers, which raise serious concern on cyber security. This paper focuses on comprehensive analysis on subdomain takeover and figures out the security vulnerability reason and attack scenarios. Element for subdomain enumeration, subdomain takeover process and finally, a proposed inclusive prevention model of subdomain takeover have been discussed throughout the paper.