Shopify is vulnerable by a New FingerPrint

[m7mdharoun]

Shopify

Proof

https://hackerone.com/reports/416474

Documentation

Not Only FingerPrint Sorry, this shop is currently unavailable.
New FingerPrint that I've found in my report Now Your domain ( Name of subdomain ) is ready to connect to your Shopify Shop

[codingo]

This isn't really a new fingerprint, it's an edge case. Tested this now and it requires the store to be created, but never linked to the domain. Even if the shop is in the portal with a status of "not connected" (i.e. added to any account in advance of DNS), it can not be taken over.

Going to call this an edge case since there's some truth to it, but I think it's a fairer assessment to say it's not vulnerable as it's such an unlikely scenario that somebody would point DNS before adding their domain into their account.

[codingo]

Resolved in #52

[marcelo321]

hello @codingo,

I have found several subdomains that had the fingerprints:

Sorry, this shop is currently unavailable.

But when visiting the CNAME, it showed a perfectly working shop in shopify.

So shop.example.com was giving me "shop is currently unavailable" but when visiting example.myshopify.com it was a perfectly working shop.

Is this still vulnerable?

[Mouja0412]

Hello @codingo
I managed to takeover a subdomain, I had this fingerprint "Only one step left!
To finish setting up your new web address, go to your domain settings, click "Add existing domain", and enter: yourdomainname

Verify if the name of the store is available or not
Add your domain without the www's under Online store > Domains.

https://medium.com/@thebuckhacker/how-to-do-55-000-subdomain-takeover-in-a-blink-of-an-eye-a94954c3fc75

[NagliNagli]

I tookover a domain like the example above as well.

[h4ckdi]

I just managed to takeover subdomain with fingerprint "Only one step left!

[wicked-wick]

I did the same as explained above ? will this be accepted?