Posted by shed riot on Aug 06

Summary

The hostname resolved to an address within a dynamic cloud IP pool.

The address had been released and was no longer controlled by the

organisation operating the hostname.

This condition is referred to as an "afterlife" issue.

Unlike a conventional CNAME-based subdomain takeover, the DNS record

pointed directly to a reusable cloud IP address. An attacker obtaining

that address could receive traffic intended for the...