search

EdOverflow / can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Creative Commons Attribution 4.0 International
4.88k stars 716 forks source link

Subdomain Takeover Possible via Landingi #117

Open messi96 opened 5 years ago

messi96 commented 5 years ago

Service name

Landingi

Proof

Landingi is Vulnerable to Subdomain Takeover If you get an Error Similar to this one

Fingerprint

  1. Create a new account get a free one for 14 days
  2. Create your own template ( landing page ) for the PoC similar to 
    $ cat aelfjj1or81uegj9ea8z31zro.html
<!-- PoC by username -->
  3. Add the subdomain under Domains in the left pane.
  4. Subdomain gets successfully verified if it is unclaimed or has dangling CNAME records ( cname.landingi.com. )
  5. On the selected landing page click MORE “...” to expand the list of available actions
  6. Select “PUBLISHING OPTIONS” on the dropdown And then “CHANGE URL” if you want to.
  7. Choose your domain from the list and add a path to it if needed.
  8. Save changes & Publish!
  9. Enjoy your leads.

Documentation

https://landingi.com/knowledge-base

Thanks :)

0xElmalky commented 4 years ago

Hello Is this case still vulnerable ?

adityathebe commented 3 years ago

This is an edge case. Needs to be verified manually

image

image

kcnewb1e commented 3 years ago

image this is error from landingi to?

ahmedameenaim commented 3 years ago

@adityathebe Is there a way to bypass it ?

pdelteil commented 3 years ago

I confirm is not possible to take over the subdomains.

Nikhil28-09-04 commented 2 months ago

Will this be vulnerable?? @pdelteil Screenshot (74)