nuclei-templates/takeovers/wishpond-takeover.yaml

id: wishpond-takeover

info:
  name: Wishpond Takeover Detection
  author: pdteam
  severity: high
  reference:
    - https://github.com/EdOverflow/can-i-take-over-xyz
  tags: takeover,wishpond

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
          - Host != ip

      - type: word
        words:
          - https://www.wishpond.com/404?campaign=true
          - 'Oops! There isn’t a Wishpond Campaign published to this page.'
        condition: or
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								id: wishpond-takeover
 								info:
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								  name: Wishpond Takeover Detection
-												Updated author names

											
										
										
											2021-06-09 12:20:56 +00:00
+								  author: pdteam
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								  severity: high
-												refactor: Description field uniformization

* info field reorder
* reference values refactored to list
* added new lines after the id and before the protocols
* removed extra new lines
* split really long descriptions to multiple lines (part 1)
* other minor fixes

											
										
										
											2022-04-22 10:38:41 +00:00
+								  reference:
 								    - https://github.com/EdOverflow/can-i-take-over-xyz
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								  tags: takeover,wishpond
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
 								requests:
 								  - method: GET
 								    path:
 								      - "{{BaseURL}}"
-												Fixes Subdomain TKO False Positives (#6066)

* updates

* Update sprintful-takeover.yaml

* Update netlify-takeover.yaml
											
										
										
											2022-11-17 15:43:27 +00:00
+								    matchers-condition: and
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								    matchers:
-												Fixes Subdomain TKO False Positives (#6066)

* updates

* Update sprintful-takeover.yaml

* Update netlify-takeover.yaml
											
										
										
											2022-11-17 15:43:27 +00:00
+								      - type: dsl
 								        dsl:
 								          - Host != ip
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								      - type: word
 								        words:
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								          - https://www.wishpond.com/404?campaign=true
-												Update wishpond-takeover.yaml

1. source https://www.wishpond.com/rf/136247?scid=74249&type=Merchant

2. To test this takeover is required a paid account.
											
										
										
											2022-12-06 18:35:56 +00:00
+								          - 'Oops! There isn’t a Wishpond Campaign published to this page.'
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								        condition: or