nuclei-templates/takeovers/pantheon-takeover.yaml

29 lines
675 B
YAML
Raw Normal View History

id: pantheon-takeover
info:
2022-12-07 04:17:35 +00:00
name: Pantheon Takeover Detection
2021-06-09 12:20:56 +00:00
author: pdteam
severity: high
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/24
- https://medium.com/bug-bounty/how-i-took-over-several-stanford-subdomains-also-let-me-explain-you-the-pain-to-report-it-d84b08704be8
tags: takeover
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
words:
- "The gods are wise, but do not know of the site which you seek."
- type: dsl
dsl:
- '!contains(host,"apigee.io")'