Sub Domain Takeover

Vulnerable Subdomain : http://launcher-beta.mojang.com

 

CNAME : s3.amazonaws.com

 

Service Provider : Mojang (Which is takeoverable )

 

Steps to Reproduce :

 

1) Visit the http://launcher-beta.mojang.com of which bucket is under my control .

 

POC :

1) Video recording and Screenshots attached.