nuclei-templates/takeovers/subdomain-takeover.yaml

399 lines
9.8 KiB
YAML
Raw Normal View History

2020-04-26 04:22:04 +00:00
id: detect-all-takeovers
info:
2020-07-20 13:04:40 +00:00
name: Subdomain Takeover Detection
author: "melbadry9 & pxmme1337 & geeknik"
2020-04-26 04:22:04 +00:00
severity: high
2021-02-12 06:19:06 +00:00
tags: takeover
2020-04-26 04:22:04 +00:00
2020-04-29 01:53:12 +00:00
# Update this list with new takeovers matchers
# Do not delete other template files for takeover
2020-04-26 06:33:11 +00:00
# https://github.com/EdOverflow/can-i-take-over-xyz
2020-07-20 13:04:40 +00:00
# You need to claim the subdomain / CNAME of the subdomain to confirm the takeover.
# Do not report subdomain takeover issues only based on detection.
# Total number of services #72
2020-04-26 04:22:04 +00:00
requests:
- method: GET
path:
2021-01-13 07:31:46 +00:00
- "{{BaseURL}}"
2020-04-26 04:22:04 +00:00
matchers-condition: or
2020-04-26 04:22:04 +00:00
matchers:
- type: word
2020-07-20 00:12:18 +00:00
name: acquia
2020-04-26 04:22:04 +00:00
words:
2020-07-20 00:12:18 +00:00
- If you are an Acquia Cloud customer and expect to see your site at this address
- The site you are looking for could not be found.
2020-07-20 00:18:51 +00:00
2020-04-26 04:22:04 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: agilecrm
2020-04-26 04:22:04 +00:00
words:
2020-07-20 00:12:18 +00:00
- Sorry, this page is no longer available.
2020-07-20 00:18:51 +00:00
2020-04-26 04:22:04 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: airee
2020-04-26 04:22:04 +00:00
words:
2020-07-20 00:12:18 +00:00
- Ошибка 402. Сервис Айри.рф не оплачен
2020-07-20 00:18:51 +00:00
2020-04-26 04:22:04 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: aftership
2020-04-26 04:22:04 +00:00
words:
2020-07-20 00:12:18 +00:00
- Oops.</h2><p class="text-muted text-tight">The page you're looking for doesn't
exist.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: aha
words:
2020-07-20 00:12:18 +00:00
- There is no portal here ... sending you back to Aha!
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: anima
words:
2020-07-20 00:12:18 +00:00
- "If this is your website and you've just created it, try refreshing in a minute"
- type: word
2020-07-20 13:04:40 +00:00
name: aws-bucket
words:
2020-07-20 00:12:18 +00:00
- "The specified bucket does not exist"
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: bigcartel
words:
2020-07-20 00:12:18 +00:00
- "<h1>Oops! We couldn&#8217;t find that page.</h1>"
2020-05-09 08:59:35 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: bitbucket
2020-05-09 08:59:35 +00:00
words:
2020-07-20 00:12:18 +00:00
- The page you have requested does not exist
- Repository not found
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: brightcove
words:
2020-07-20 00:12:18 +00:00
- '<p class="bc-gallery-error-code">Error Code: 404</p>'
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: campaignmonitor
words:
2020-07-20 00:12:18 +00:00
- "<strong>Trying to access your account?</strong>"
- or <a href="mailto:help@createsend.com
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: canny
words:
2020-07-20 00:12:18 +00:00
- Company Not Found
- There is no such company. Did you enter the right URL?
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: cargo
words:
2020-07-20 00:12:18 +00:00
- If you're moving your domain away from Cargo you must make this configuration
through your registrar's DNS control panel.
2020-07-20 00:18:51 +00:00
- type: word
name: cargocollective
words:
- <div class="notfound">
- 404 Not Found<br>
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: fastly
words:
2020-07-20 00:12:18 +00:00
- "Fastly error: unknown domain:"
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: feedpress
words:
2020-07-20 00:12:18 +00:00
- The feed has not been found.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: frontify
words:
2020-07-20 00:12:18 +00:00
- 404 - Page Not Found
- Oops… looks like you got lost
condition: and
part: body
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: gemfury
words:
2020-07-20 00:12:18 +00:00
- "404: This page could not be found."
2020-07-20 00:18:51 +00:00
2020-07-20 00:12:18 +00:00
- type: word
name: getresponse
words:
- With GetResponse Landing Pages, lead generation has never been easier
2020-07-20 00:18:51 +00:00
- type: word
name: ghost
words:
- The thing you were looking for is no longer here
- The thing you were looking for is no longer here, or never was
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: github
words:
2020-07-20 00:12:18 +00:00
- There isn't a GitHub Pages site here.
- For root URLs (like http://example.com/) you must provide an index.html file
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: hatenablog
words:
2020-07-20 00:12:18 +00:00
- 404 Blog is not found
- Sorry, we can't find the page you're looking for.
2020-07-20 00:18:51 +00:00
- type: word
name: helpjuice
words:
- We could not find what you're looking for.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: helprace
words:
2020-07-20 00:12:18 +00:00
- Alias not configured!
- Admin of this Helprace account needs to set up domain alias
- "(see Step 2 here: Using your own domain with Helprace)."
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: helpscout
words:
2020-07-20 00:12:18 +00:00
- "No settings were found for this company:"
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: heroku
words:
2020-07-20 00:12:18 +00:00
- There's nothing here, yet.
- herokucdn.com/error-pages/no-such-app.html
- "<title>No such app</title>"
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: hubspot
words:
2020-07-20 00:12:18 +00:00
- Domain not found
- does not exist in our system
2020-07-20 00:18:51 +00:00
- type: word
name: intercom
words:
- This page is reserved for artistic dogs.
- <h1 class="headline">Uh oh. That page doesnt exist.</h1>
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: jazzhr
words:
2020-07-20 00:12:18 +00:00
- This account no longer active
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: jetbrains
words:
2020-07-20 00:12:18 +00:00
- is not a registered InCloud YouTrack.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: kinsta
words:
2020-07-20 00:12:18 +00:00
- No Site For Domain
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: landingi
words:
2020-07-20 00:12:18 +00:00
- It looks like you're lost
- The page you are looking for is not found
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: launchrock
words:
2020-07-20 00:12:18 +00:00
- It looks like you may have taken a wrong turn somewhere. Don't worry...it happens
to all of us.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: mashery
words:
2020-07-20 00:12:18 +00:00
- Unrecognized domain <strong>
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: ngrok
words:
2020-07-20 00:12:18 +00:00
- ngrok.io not found
- Tunnel *.ngrok.io not found
- type: word
2020-07-20 00:12:18 +00:00
name: pantheon.io
words:
2020-07-20 00:12:18 +00:00
- "The gods are wise, but do not know of the site which you seek."
2020-07-20 00:22:01 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: pingdom
words:
2020-07-20 00:12:18 +00:00
- Public Report Not Activated
- This public report page has not been activated by the user
2020-07-20 00:18:51 +00:00
- type: word
name: proposify
words:
- If you need immediate assistance, please contact <a href="mailto:support@proposify.biz
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: readme
words:
2020-07-20 00:12:18 +00:00
- Project doesnt exist... yet!
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: shopify
words:
2020-07-20 00:12:18 +00:00
- "Sorry, this shop is currently unavailable."
2021-02-22 12:01:33 +00:00
- 'To finish setting up your new web address, go to your domain settings, click "Connect existing domain"'
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: simplebooklet
words:
2020-07-20 00:12:18 +00:00
- We can't find this <a href="https://simplebooklet.com
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: smartjob
words:
2020-07-20 00:12:18 +00:00
- Job Board Is Unavailable
- This job board website is either expired
- This job board website is either expired or its domain name is invalid.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: smartling
words:
2020-07-20 00:12:18 +00:00
- Domain is not configured
2020-07-20 00:18:51 +00:00
- type: word
name: smugmug
words:
- '{"text":"Page Not Found"'
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: strikingly
words:
2020-07-20 00:12:18 +00:00
- But if you're looking to build your own website
- you've come to the right place.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: surge
words:
2020-07-20 00:12:18 +00:00
- project not found
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: surveygizmo
words:
2020-07-20 00:12:18 +00:00
- data-html-name
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: tave
words:
2020-07-20 00:12:18 +00:00
- "<h1>Error 404: Page Not Found</h1>"
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: teamwork
words:
2020-07-20 00:12:18 +00:00
- Oops - We didn't find your site.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: tictail
words:
2020-07-20 00:12:18 +00:00
- Building a brand of your own?
- 'to target URL: <a href="https://tictail.com'
- Start selling on Tictail.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: tilda
words:
2020-07-20 00:12:18 +00:00
- Domain has been assigned
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: tumblr
words:
2020-07-20 00:12:18 +00:00
- Whatever you were looking for doesn't currently exist at this address.
- There's nothing here.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: uberflip
words:
2020-07-20 00:12:18 +00:00
- "Non-hub domain, The URL you've accessed does not provide a hub."
2020-07-20 00:18:51 +00:00
2020-08-04 19:26:22 +00:00
- type: regex
2020-07-20 00:12:18 +00:00
name: unbounce
2020-08-04 19:26:22 +00:00
regex:
- "^The requested URL was not found on this server.$"
2020-07-20 00:18:51 +00:00
2020-07-20 00:12:18 +00:00
- type: regex
name: uptimerobot
regex:
- "^page not found$"
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: uservoice
words:
2020-07-20 00:12:18 +00:00
- This UserVoice subdomain is currently available!
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: vend
words:
2020-07-20 00:12:18 +00:00
- Looks like you've traveled too far into cyberspace.
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: webflow
words:
2020-07-20 00:12:18 +00:00
- <p class="description">The page you are looking for doesn't exist or has been
moved.</p>
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: wishpond
words:
2020-07-20 00:12:18 +00:00
- https://www.wishpond.com/404?campaign=true
2020-07-20 00:18:51 +00:00
- type: word
2020-07-20 00:12:18 +00:00
name: wordpress
words:
2020-07-20 00:12:18 +00:00
- Do you want to register
2020-07-20 00:18:51 +00:00
2020-07-20 00:12:18 +00:00
- type: regex
name: worksites
regex:
- "(?:Company Not Found|you&rsquo;re looking for doesn&rsquo;t exist)"
- type: word
2020-07-20 00:12:18 +00:00
name: wufoo
words:
2020-07-20 00:12:18 +00:00
- Profile not found
- Hmmm....something is not right.
- type: word
name: zendesk
words:
- this help center no longer exists
- type: word
name: readthedocs
words:
2020-07-23 07:08:42 +00:00
- unknown to Read the Docs
- type: word
name: tilda
words:
- <title>Please renew your subscription</title>
2020-07-23 07:15:17 +00:00
- Please go to the site settings and put the domain name in the Domain tab.
2020-07-23 07:08:42 +00:00
- type: word
name: smart-jobboard
words:
2020-09-14 07:41:15 +00:00
- This job board website is either expired or its domain name is invalid.
2020-09-14 10:22:22 +00:00
2020-09-14 07:41:15 +00:00
- type: word
name: netlify
words:
2020-09-14 10:22:22 +00:00
- "Not Found"
- "server: Netlify"
2020-10-10 19:58:39 +00:00
condition: and
part: all
2020-10-10 16:05:25 +00:00
- type: word
name: vercel
words:
2020-10-10 17:47:45 +00:00
- The deployment could not be found on Vercel.
- DEPLOYMENT_NOT_FOUND
2020-10-10 16:05:25 +00:00
condition: and