Subdomain takeover proof of concept — by Hassan Jawaid

This page is served from uft.unimelb.edu.au, a University of Melbourne hostname, by a security researcher who does not control that domain.

This is authorised security research. It was carried out under the University of Melbourne bug bounty programme on Bugcrowd, which runs an explicit subdomain takeover campaign covering *.unimelb.edu.au.

This is not a defacement and no University system was accessed, altered or damaged. No data is collected by this page. There are no forms and no scripts.

How

The zone uft.unimelb.edu.au was still delegated by the University's own nameservers to three BuddyNS servers that no longer held it. BuddyNS accepts a zone from anyone who names it, with no proof of ownership, so the delegation could be claimed.

Marker: proof-7f3a2b

Remediation

Delete the three NS records for uft.unimelb.edu.au from the unimelb.edu.au zone. This ends the exposure immediately.

This page and the DNS records behind it will be withdrawn on request, and in any case as soon as the finding has been verified. Contact via the Bugcrowd submission.