nuclei-templates/takeovers/wix-takeover.yaml

31 lines
726 B
YAML
Raw Normal View History

2021-07-12 07:46:21 +00:00
id: wix-takeover
info:
2021-10-30 11:17:35 +00:00
name: Wix Takeover Detection
2021-10-27 09:47:08 +00:00
author: harshinsecurity,philippedelteil
severity: high
description: This subdomain take over would only work on an edge case when the account was deleted. You will need a premium account (~ US$7) to test the take over.
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/231
2021-10-27 09:47:08 +00:00
tags: takeover,wix
2021-07-12 07:46:21 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}"
2021-07-12 09:59:23 +00:00
matchers-condition: and
2021-07-12 07:46:21 +00:00
matchers:
- type: dsl
dsl:
- Host != ip
2021-07-12 07:46:21 +00:00
- type: word
words:
2021-07-12 09:59:23 +00:00
- 'Error ConnectYourDomain occurred'
2021-10-27 09:47:08 +00:00
- 'wixErrorPagesApp'
2022-08-27 08:26:36 +00:00
condition: and
2021-10-27 09:47:08 +00:00
2021-07-12 07:46:21 +00:00
- type: status
status:
2021-10-27 09:47:08 +00:00
- 404