How I Got An Appreciation Letter From Harvard University

Hello guys, my name is Santosh Bobade. This is my first write-up, so any spelling mistake and grammatical mistake please ignored.

Let’s start

1)First, enumerate the subdomain of Harvard University and I got a single interesting subdomain. i.e. *.harvard.edu (sorry for not to a disclosed subdomain)

2)I saw the response in the browser and got 404 Error — page not found please check the URL

Yup quiet interested

3)I Ran the command in Kali Linux

host *.harvard.edu

In response, I got IP XXX.XX.XXX.XX

Now again I ran the host command

host XXX.XX.XXX.XX

In response I got *.weebly.com

Now checking in browser *.weebly.com

I got the same response 404 Error — page not found please check the URL

I was like yes I got it

Exploitation:

1)Created an account on weebly.com

In site address, I wrote *.weebly.com

And in the domain, I wrote *.harvard.edu

And choosing option connect your domain select the plan and successfully subdomain takeover

Appreciation Letter:

I hope you enjoyed my writeup

follow me on

LinkedIn: https://www.linkedin.com/in/santosh-bobade-531094192/
Twitter: https://twitter.com/Santosh88267387?s=09

Thanks….!