nuclei-templates/technologies/herokuapp-detect.yaml

20 lines
414 B
YAML
Raw Normal View History

2021-07-10 16:52:27 +00:00
id: herokuapp-detect
2021-07-10 16:31:09 +00:00
info:
2021-07-10 16:52:27 +00:00
name: Detect websites using Herokuapp endpoints
2021-07-10 16:31:09 +00:00
author: alifathi-h1
severity: info
description: Detected endpoints might be vulnerable to subdomain takeover or disclose sensitive info
tags: heroku,tech
2021-07-10 16:31:09 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- "[a-z0-9.-]+\\.herokuapp\\.com"