Technique

domain takeover via exposed authorization code

technique:domain_takeover_via_exposed_authorization_code Also: domain stealing

A domain-transfer takeover method involving an authorization code exposed in hidden HTML source.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming USES Skyper Explicit 170

Claims

Skyper USES domain takeover via exposed authorization code

Skyper says he used an exposed authorization code to steal the phrack.org domain.

Explicit Confidence 99% · Skyper EP 170 Details

“So, I decided to steal a domain, which was phrack.org”

Skyper · offsets 17357–17410

“the authorization code would be written there in the hidden HTML tag”