AppSec EU 2017 DNS Hijacking Using Cloud Providers: No Verification Needed by Frans Rosén

A few years ago Detectify did a blog post regarding domain hijacking using services like AWS Heroku and GitHub. These issues still remains and are still affecting a lot of companies and there are many tools to find these vulnerabilities that have popped up after this went public. However there are many more ways to hijack domains nameservers and DNS-providers. The tools out there are missing these cases completely. Frans will go through both the currently disclosed and the non-disclosed ways to take control over domains and will share the specific techniques involved. - Managed by the official OWASP Media Project ,

#