nuclei-templates/takeovers/wix-takeover.yaml

id: wix-takeover

info:
  author: harshinsecurity,philippedelteil
  description: This subdomain take over would only work on an edge case when the account was deleted. You will need a premium account (~ US$7) to test the take over.
  severity: high
  tags: takeover,wix
  reference: https://github.com/EdOverflow/can-i-take-over-xyz/issues/231

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        condition: or
        words:
          - 'Error ConnectYourDomain occurred'
          - 'wixErrorPagesApp'

      - type: status
        status:
          - 404
Create wix-takeover.yaml 2021-07-12 07:46:21 +00:00			`id: wix-takeover`

			`info:`
Update wix-takeover.yaml 2021-10-27 09:47:08 +00:00			`author: harshinsecurity,philippedelteil`
			`description: This subdomain take over would only work on an edge case when the account was deleted. You will need a premium account (~ US$7) to test the take over.`
			`severity: high`
			`tags: takeover,wix`
			`reference: https://github.com/EdOverflow/can-i-take-over-xyz/issues/231`
Create wix-takeover.yaml 2021-07-12 07:46:21 +00:00
			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}"`

Update wix-takeover.yaml 2021-07-12 09:59:23 +00:00			`matchers-condition: and`
Create wix-takeover.yaml 2021-07-12 07:46:21 +00:00			`matchers:`
			`- type: word`
Update wix-takeover.yaml 2021-10-27 09:47:08 +00:00			`condition: or`
Create wix-takeover.yaml 2021-07-12 07:46:21 +00:00			`words:`
Update wix-takeover.yaml 2021-07-12 09:59:23 +00:00			`- 'Error ConnectYourDomain occurred'`
Update wix-takeover.yaml 2021-10-27 09:47:08 +00:00			`- 'wixErrorPagesApp'`

Create wix-takeover.yaml 2021-07-12 07:46:21 +00:00			`- type: status`
			`status:`
Update wix-takeover.yaml 2021-10-27 09:47:08 +00:00			`- 404`