Collected research
We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI
The WHOIS server for .mobi moved to whois.nic.mobi and the old dotmobiregistry.net was left to expire, so the researchers bought it for $20 and answered queries clients still had hardcoded: 2.5 million from 135,000 hosts, including mail servers and .gov systems. Certificate authorities read the administrative-contact address out of WHOIS for domain validation, so GlobalSign offered their address for microsoft.mobi, and phpWhois eval()s server responses for RCE.
Record
- Researcher
- Benjamin Harris and Aliz Hammond
- Published by
- watchTowr
- Date
- Topic
- Server
In the archive
Related sources
- phpWhois CVE-2015-5243 advisory Advisory
- fail2ban CVE-2021-32749 advisory Advisory
Tags
This page is the archive's own catalogue record. The research is the work of Benjamin Harris and Aliz Hammond, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .