nuclei-templates/http/osint/phishing/vodafone-phish.yaml

34 lines
820 B
YAML
Raw Normal View History

2024-02-16 21:47:34 +00:00
id: vodafone-phish
info:
2024-02-16 21:51:28 +00:00
name: vodafone phishing Detection
2024-02-16 21:47:34 +00:00
author: rxerium
severity: info
description: |
2024-02-16 21:51:28 +00:00
A vodafone phishing website was detected
2024-02-16 21:47:34 +00:00
reference:
- https://vodafone.co.uk
2024-03-08 07:16:17 +00:00
tags: phishing,vodafone,osint
2024-02-16 21:47:34 +00:00
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Vodafone – Our Best Ever Network'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"vodafone.co.uk")'
# digest: 490a0046304402200aaf0023337b2a4ace0a2977bd9fd22e250689b7be123bd4e8c9059697dce31802206d089181e5108f39fe7b6a5de0be33539dc3ad4beac37bd6073521435c8c0c2c:922c64590222798bb761d5b6d8e72950