id: aws-redirect
info:
name: Subdomain takeover AWS S3
author: manikanta a.k.a @secureitmania
severity: info
reference: https://link.medium.com/fgXKJHR9P7
tags: aws,takeover
requests:
- method: GET
path:
- '{{BaseURL}}'
redirects: false
matchers-condition: and
matchers:
- type: status
status:
- 307
- type: word
words:
- 'Location: https://aws.amazon.com/s3/'
part: header