I’ve come across a broken link in a target web app. The link is broken due to a missing slash (/).
The result is an href pointing to www.target.comhttp/blablabla. In order to exploit this, I’ll have to register a .comhttp domain. Is this in any way possible?
comhttp TLD is not open availanle for registration.
Theoritically u may:
1- apply for the tld with ICAN.
2- DNS poison ur victim
3- mangle with ur victim hosts file
Can you manipulate the value?
Ah, too bad. I’d just read about broken link hijacking, and I thought this could be an interesting bug. I can’t manipulate the value, it’s a static page.