Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Instapage Takeover #73

Open
CaptainFreak opened this issue Jan 6, 2019 · 3 comments
Open

Instapage Takeover #73

CaptainFreak opened this issue Jan 6, 2019 · 3 comments
Labels
not vulnerable Someone has made it very clear that this service is not vulnerable to subdomain takeovers.

Comments

@CaptainFreak
Copy link

CaptainFreak commented Jan 6, 2019 •
edited
Loading

Instapage

Proof

http://www.geekboy.ninja/blog/hijacking-tons-of-instapage-expired-users-domains-subdomains/

Is it still possible ?
@arbazkiraak
Copy link

Hi @CaptainFreak

  • I heard it was fixed right after that report & not possible to takeover anymore on instapage.

@Ice3man543
Copy link

@EdOverflow I can confirm, this takeover is not possible anymore. They fixed the flaw after geekboy's issue.

@EdOverflow EdOverflow added not vulnerable Someone has made it very clear that this service is not vulnerable to subdomain takeovers. and removed needs confirmation labels Apr 1, 2019
@maxicrisp
Copy link

Has anyone successfully verified this lately? It would appear that you need to request access to the previous account in order to establish the connection to the subdomain, and switch it with your own page.

@adiffpirate adiffpirate mentioned this issue Apr 12, 2020
Merged
@fuzz7j fuzz7j mentioned this issue Apr 14, 2022
Merged
@EdOverflow EdOverflow mentioned this issue Feb 15, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
not vulnerable Someone has made it very clear that this service is not vulnerable to subdomain takeovers.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
5 participants
@arbazkiraak @EdOverflow @CaptainFreak @Ice3man543 @maxicrisp