writeups.xyz / Hijacking AUR Packages by Searching for Expired Domains

Submitter : c2a

Date: 26 October 2022

Bounty : undisclosed

Vulnerabilities :

• Subdomain Takeover
• Supply Chain Attack

Programs :

• Undisclosed

Authors :

• Joren Vrancken

Link :
https://blog.nietaanraken.nl/posts/aur-packages-expired-domains/