# Critical WHOIS Vulnerability Exposed: Security Researcher Manipulates Certificate Authority Emails 🕵️‍♂️

**URL:** <https://onehack.st/t/critical-whois-vulnerability-exposed-security-researcher-manipulates-certificate-authority-emails/291220>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [September 12, 2024, 6:04pm UTC](https://onehack.st/t/critical-whois-vulnerability-exposed-security-researcher-manipulates-certificate-authority-emails/291220 "2024-09-12T18:04:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [September 12, 2024, 6:04pm UTC](https://onehack.st/t/critical-whois-vulnerability-exposed-security-researcher-manipulates-certificate-authority-emails/291220/1 "2024-09-12T18:04:30Z")

</div>

**Summary:**

* * *

1. **Discovery of Vulnerability**  
Security researcher Benjamin Harris revealed a critical flaw in the WHOIS system by registering an expired domain used by .mobi’s authoritative WHOIS server, gaining unauthorized access to sensitive data.

2. **Rogue Server Exploit**  
The rogue WHOIS server received millions of queries and allowed Harris to control email addresses used by certificate authorities, such as GlobalSign, for domain verification processes.

3. **Ethical Considerations**  
Harris halted further testing to avoid unethical consequences, highlighting systemic weaknesses in WHOIS client configurations and broader internet infrastructure management.

**Read more at:** [Ars Technica](https://www.arstechnica.com)