2026-09-21 19:22 UTC
@winterknight1337@infosec.exchange what an incredible irresponsible way to prove control of a domain.
Why upload a .txt file when you can splash the name of your company all over the page
Replies (2)
-
@winterknight1337@infosec.exchange 2026-09-21 19:25
@dan@infosec.exchange agreed. Don’t like this approach at all. Especially on something that’s referenced as often as owasp. It’s flashy I guess.
-
@Lee_Holmes@infosec.exchange 2026-09-21 19:57
@dan@infosec.exchange @winterknight1337@infosec.exchange They also took over the 404 redirect - https://api-security.owasp.org/aouaoeuaouaoeu