can-i-take-over-xyz icon indicating copy to clipboard operation
can-i-take-over-xyz copied to clipboard

leadpages.com possible to takeover

Open GDATTACKER-RESEARCHER opened this issue 5 years ago • 9 comments
trafficstars

leadpages.com

error page looks like this one leadpages

Documentation

https://support.leadpages.com/hc/en-us/articles/218820517-Connect-your-domain

GDATTACKER-RESEARCHER avatar Sep 03 '20 04:09 GDATTACKER-RESEARCHER

image

GDATTACKER-RESEARCHER avatar Sep 03 '20 06:09 GDATTACKER-RESEARCHER

image

GDATTACKER-RESEARCHER avatar Sep 03 '20 06:09 GDATTACKER-RESEARCHER

Erro Code

404 This page couldn’t be found, so let’s get you turned around! The page you’re looking for may have been moved. Double check that you have the right web address and give it another go!

GDATTACKER-RESEARCHER avatar Sep 03 '20 06:09 GDATTACKER-RESEARCHER

The CNAME should be set to custom-proxy.leadpages.net ? Or is the custom-proxy part a variable ?

adityathebe avatar Sep 03 '20 06:09 adityathebe

image in my test case the domain have cloudflare records only

GDATTACKER-RESEARCHER avatar Sep 03 '20 07:09 GDATTACKER-RESEARCHER

this error page doesnt always mean its vulnerable Capture

anyone can select default error page after adding this to domain

WRAGG5 avatar Jul 22 '21 21:07 WRAGG5

@WRAGG5 sorry sir but the page you are showing is alot different from the poc i showed and secondly manually checking will define better whether it can be or not i am able to do so the issue has been raised

knowthetech avatar Jul 22 '21 21:07 knowthetech