Suggestion: Allow Subdomain Takeover

[secuninja]

Dear Team,

as subdomain takeover is usually non-intrusive, as it makes use of resources which are not controlled by the affected subdomain owners, what do you think about adding it to the OBB scope?

You could make the researchers place a unique notice or ID for automatic vulnerability approval and as menionted before, this does not affect or harm or touch the domain owners systems in any way.

[x1admin]

Dear Team,

as subdomain takeover is usually non-intrusive, as it makes use of resources which are not controlled by the affected subdomain owners, what do you think about adding it to the OBB scope?

You could make the researchers place a unique notice or ID for automatic vulnerability approval and as menionted before, this does not affect or harm or touch the domain owners systems in any way.

Good idea, we will discuss

[secuninja]

may I ask for status here?

[PhilippeDelteil]