AllAboutBugBounty/Misc/Broken Link Hijacking.md

17 lines
895 B
Markdown
Raw Permalink Normal View History

2021-02-09 02:15:31 +00:00
# Broken Link Hijacking
2022-06-15 10:38:42 +00:00
## Introduction
2021-07-21 15:38:57 +00:00
Broken Link Hijacking exists whenever a target links to an expired domain or page
2021-02-09 02:15:31 +00:00
2021-07-21 15:38:57 +00:00
## How to find
1. Manually find external links on the target site (For example, check some links to social media accounts)
2. Try using tools to find broken link, for example using tools that listed in this readme
2021-02-09 02:15:31 +00:00
2022-06-15 10:38:42 +00:00
## Tools
- [broken-link-checker](https://github.com/stevenvachon/broken-link-checker)
- [Check My Links](https://chrome.google.com/webstore/detail/check-my-links/ojkcdipcgfaekbeaelaapakgnjflfglf/related)
2021-02-09 02:15:31 +00:00
2022-06-15 10:38:42 +00:00
## References
- [Broken Link Hijacking - How expired links can be exploited.](https://edoverflow.com/2017/broken-link-hijacking/)
- [How I was able to takeover the companys LinkedIn Page](https://medium.com/@bathinivijaysimhareddy/how-i-takeover-the-companys-linkedin-page-790c9ed2b04d)
- [Hackerone #1466889](https://hackerone.com/reports/1466889)