Updates subdomain_takeover.md

            * [Clickjacking](clickjacking.md)

            * [Broken Authentication or Session Management](broken_authentication_or_session_management.md)

            * [Text\/content-injection](text-injection.md)

            * [Subdomain takeover](subdomain_takeover.md)

            * [Subdomain Takeover](subdomain_takeover.md)

            * [Cross Site Request Forgery](cross_site_request_forgery.md)

            * [Cross-site-scripting](cross-site-scripting.md)

                * [Examples](examplesXSS.md)

# Subdomain takeover

# Subdomain Takeover

This is a really cool attack.

First you looks for all subdomains. Sometimes a company has forgotten about a subdomain. Like and old support system called `support.example.com`. And then the support-system that points to that domain gets removed. That means that we could start a service for support, and like it to that domain. And thereby controlling the domain.