nuclei-templates/subdomain-takeover/detect-all-takeovers.yaml

358 lines
8.8 KiB
YAML
Raw Normal View History

2020-04-26 04:22:04 +00:00
id: detect-all-takeovers
info:
name: Subdomain takeover finder
2020-04-26 12:56:59 +00:00
author: "melbadry9 & pxmme1337"
2020-04-26 04:22:04 +00:00
severity: high
2020-04-29 01:53:12 +00:00
# Update this list with new takeovers matchers
# Do not delete other template files for takeover
2020-04-26 06:33:11 +00:00
# https://github.com/EdOverflow/can-i-take-over-xyz
2020-05-25 08:13:15 +00:00
# You need to claim the CNAME the subdomain to confirm the takeover.
# Do not report this without claiming the CNAME.
2020-04-26 04:22:04 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/"
matchers-condition: or
2020-04-26 04:22:04 +00:00
matchers:
- type: word
name: pantheon.io
words:
- "The gods are wise, but do not know of the site which you seek."
2020-05-09 08:59:35 +00:00
2020-04-26 04:22:04 +00:00
- type: word
name: aws-s3-bucket
words:
- "The specified bucket does not exist"
2020-05-09 08:59:35 +00:00
2020-04-26 04:22:04 +00:00
- type: word
name: anima
words:
- "If this is your website and you've just created it, try refreshing in a minute"
2020-05-09 08:59:35 +00:00
2020-04-26 04:22:04 +00:00
- type: word
name: ghost
words:
- "The thing you were looking for is no longer here, or never was"
2020-04-26 04:22:04 +00:00
- type: regex
name: worksites
regex:
- "(?:Company Not Found|you’re looking for doesn’t exist)"
2020-04-26 04:22:04 +00:00
- type: word
name: landingi
words:
- It looks like you're lost
- The page you are looking for is not found
- type: word
name: helprace
words:
- Alias not configured!
- Admin of this Helprace account needs to set up domain alias
- "(see Step 2 here: Using your own domain with Helprace)."
- type: word
name: canny
words:
- Company Not Found
- There is no such company. Did you enter the right URL?
- type: word
name: ngrok
words:
- ngrok.io not found
- Tunnel *.ngrok.io not found
2020-05-09 08:59:35 +00:00
- type: word
name: tumblr
words:
- Whatever you were looking for doesn't currently exist at this address.
- There's nothing here.
2020-05-09 08:59:35 +00:00
- type: word
name: github
words:
- There isn't a GitHub Pages site here.
- For root URLs (like http://example.com/) you must provide an index.html file
- type: word
name: heroku
words:
- There's nothing here, yet.
- herokucdn.com/error-pages/no-such-app.html
- "<title>No such app</title>"
- type: word
name: tictail
words:
- Building a brand of your own?
- 'to target URL: <a href="https://tictail.com'
- Start selling on Tictail.
- type: word
name: campaignmonitor
words:
- "<strong>Trying to access your account?</strong>"
- or <a href="mailto:help@createsend.com
- type: word
name: cargocollective
words:
- <div class="notfound">
- 404 Not Found<br>
- type: word
name: bitbucket
words:
- The page you have requested does not exist
- Repository not found
- type: word
name: smartling
words:
- Domain is not configured
- type: word
name: acquia
words:
- If you are an Acquia Cloud customer and expect to see your site at this address
- The site you are looking for could not be found.
- type: word
name: uservoice
words:
- This UserVoice subdomain is currently available!
- type: word
name: ghost
words:
- The thing you were looking for is no longer here
- The thing you were looking for is no longer here, or never was
- type: word
name: tilda
words:
- Domain has been assigned
- type: word
name: wordpress
words:
- Do you want to register
- type: word
name: teamwork
words:
- Oops - We didn't find your site.
- type: word
name: helpjuice
words:
- We could not find what you're looking for.
- type: word
name: helpscout
words:
- "No settings were found for this company:"
- type: word
name: cargo
words:
- If you're moving your domain away from Cargo you must make this configuration
through your registrar's DNS control panel.
- type: word
name: feedpress
words:
- The feed has not been found.
- type: word
name: surge
words:
- project not found
- type: word
name: surveygizmo
words:
- data-html-name
- type: word
name: mashery
words:
- Unrecognized domain <strong>
- type: word
name: intercom
words:
- This page is reserved for artistic dogs.
- <h1 class="headline">Uh oh. That page doesnt exist.</h1>
- type: word
name: webflow
words:
- <p class="description">The page you are looking for doesn't exist or has been
moved.</p>
- type: word
name: thinkific
words:
- You may have mistyped the address or the page may have moved.
- type: word
name: tave
words:
- "<h1>Error 404: Page Not Found</h1>"
- type: word
name: wishpond
words:
- https://www.wishpond.com/404?campaign=true
- type: word
name: aftership
words:
- Oops.</h2><p class="text-muted text-tight">The page you're looking for doesn't
exist.
- type: word
name: aha
words:
- There is no portal here ... sending you back to Aha!
- type: word
name: brightcove
words:
- '<p class="bc-gallery-error-code">Error Code: 404</p>'
- type: word
name: bigcartel
words:
- "<h1>Oops! We couldn&#8217;t find that page.</h1>"
- type: word
name: compaignmonitor
words:
- Double check the URL or <a href="mailto:help@createsend.com
- type: word
name: acquia
words:
- The site you are looking for could not be found.
- type: word
name: proposify
words:
- If you need immediate assistance, please contact <a href="mailto:support@proposify.biz
- type: word
name: simplebooklet
words:
- We can't find this <a href="https://simplebooklet.com
- type: word
name: getresponse
words:
- With GetResponse Landing Pages, lead generation has never been easier
- type: word
name: vend
words:
- Looks like you've traveled too far into cyberspace.
- type: word
name: jetbrains
words:
- is not a registered InCloud YouTrack.
- type: word
name: readme
words:
- Project doesnt exist... yet!
2020-05-09 08:59:35 +00:00
- type: word
name: smugmug
words:
- '{"text":"Page Not Found"'
2020-05-09 08:59:35 +00:00
- type: word
name: airee
words:
- Ошибка 402. Сервис Айри.рф не оплачен
2020-05-09 08:59:35 +00:00
- type: word
name: kinsta
words:
- No Site For Domain
2020-05-09 08:59:35 +00:00
- type: word
name: launchrock
words:
- It looks like you may have taken a wrong turn somewhere. Don't worry...it happens
to all of us.
2020-05-09 08:59:35 +00:00
- type: word
name: Strikingly
words:
- But if you're looking to build your own website
- you've come to the right place.
2020-05-09 08:59:35 +00:00
- type: word
name: HatenaBlog
words:
- 404 Blog is not found
- Sorry, we can't find the page you're looking for.
2020-05-09 08:59:35 +00:00
- type: word
name: wufoo
words:
- Profile not found
- Hmmm....something is not right.
2020-05-09 08:59:35 +00:00
- type: word
name: hubspot
words:
- Domain not found
- does not exist in our system
2020-05-09 08:59:35 +00:00
- type: word
name: jazzhr
words:
- This account no longer active
2020-05-09 08:59:35 +00:00
- type: word
name: smartjob
words:
- Job Board Is Unavailable
- This job board website is either expired
- This job board website is either expired or its domain name is invalid.
- type: regex
name: Uptimerobot
regex:
- "^page not found$"
2020-05-09 08:59:35 +00:00
- type: word
2020-05-09 08:59:35 +00:00
name: agile
words:
- Sorry, this page is no longer available.
2020-05-09 08:59:35 +00:00
- type: word
2020-05-09 08:59:35 +00:00
name: pingdom
words:
- Public Report Not Activated
- This public report page has not been activated by the user
2020-05-09 08:59:35 +00:00
- type: word
2020-05-09 08:59:35 +00:00
name: zendesk
words:
- this help center no longer exists
- type: word
name: frontify
words:
- 404 - Page Not Found
- Oops… looks like you got lost