Subdomain takeover via dns wildcard?
I get how ordinary subdomain takeovers work, when an attacker registers an expired/forgotten Subdomain or something, but I’m confused about the method described by the hacktricks link I posted below. If a wildcard CNAME record points to a legitimate do…