nuclei-templates/http/takeovers/wishpond-takeover.yaml

id: wishpond-takeover

info:
  name: Wishpond Takeover Detection
  author: pdteam
  severity: high
  description: Wishpond takeover was detected.
  reference:
    - https://github.com/EdOverflow/can-i-take-over-xyz
  metadata:
    max-request: 1
  tags: takeover,wishpond

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
          - Host != ip

      - type: word
        words:
          - https://www.wishpond.com/404?campaign=true
          - 'Oops! There isn’t a Wishpond Campaign published to this page.'
        condition: or
    extractors:
      - type: dsl
        dsl:
          - "resolve(Host, 'cname')"

# digest: 4a0a0047304502207293f11f5db62b0ad65eb3f64c1c7eeef99b286a8f5a309a3ccea7c41d6f2a9c0221009daf8076c7f2cd449d216cd809d1906295d848581b43e5a800374a8c10c98e07:922c64590222798bb761d5b6d8e72950
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								id: wishpond-takeover
 								info:
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								  name: Wishpond Takeover Detection
-												Updated author names

											
										
										
											2021-06-09 12:20:56 +00:00
+								  author: pdteam
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								  severity: high
-												Description Added

											
										
										
											2023-12-22 08:59:06 +00:00
+								  description: Wishpond takeover was detected.
-												refactor: Description field uniformization

* info field reorder
* reference values refactored to list
* added new lines after the id and before the protocols
* removed extra new lines
* split really long descriptions to multiple lines (part 1)
* other minor fixes

											
										
										
											2022-04-22 10:38:41 +00:00
+								  reference:
 								    - https://github.com/EdOverflow/can-i-take-over-xyz
-												Added max request counter of each template

											
										
										
											2023-04-28 08:11:21 +00:00
+								  metadata:
 								    max-request: 1
-												templateman update

											
										
										
											2023-10-14 11:27:55 +00:00
+								  tags: takeover,wishpond
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
-												Refactoring the directory structure based on protocols (#7137)

* moving http templates

* updated cves.json

* moved network CVEs

* updated scripts

* updated workflows

* updated requests to http

* replaced network to tcp

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
											
										
										
											2023-04-27 04:28:59 +00:00
+								http:
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								  - method: GET
 								    path:
 								      - "{{BaseURL}}"
-												Fixes Subdomain TKO False Positives (#6066)

* updates

* Update sprintful-takeover.yaml

* Update netlify-takeover.yaml
											
										
										
											2022-11-17 15:43:27 +00:00
+								    matchers-condition: and
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								    matchers:
-												Fixes Subdomain TKO False Positives (#6066)

* updates

* Update sprintful-takeover.yaml

* Update netlify-takeover.yaml
											
										
										
											2022-11-17 15:43:27 +00:00
+								      - type: dsl
 								        dsl:
 								          - Host != ip
-												Breakdown of takeover templates (thanks to request clustering)

											
										
										
											2021-03-18 11:23:29 +00:00
+								      - type: word
 								        words:
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								          - https://www.wishpond.com/404?campaign=true
-												Update wishpond-takeover.yaml

1. source https://www.wishpond.com/rf/136247?scid=74249&type=Merchant

2. To test this takeover is required a paid account.
											
										
										
											2022-12-06 18:35:56 +00:00
+								          - 'Oops! There isn’t a Wishpond Campaign published to this page.'
-												Update wishpond-takeover.yaml
											
										
										
											2022-12-06 19:27:54 +00:00
+								        condition: or
-												Update http takeover templates to show misconfigured cname
											
										
										
											2024-07-08 12:16:52 +00:00
+								    extractors:
 								      - type: dsl
 								        dsl:
 								          - "resolve(Host, 'cname')"
-												Auto Template Signing [Fri Dec 29 09:57:30 UTC 2023] :robot:

											
										
										
											2023-12-29 09:57:30 +00:00
+								# digest: 4a0a0047304502207293f11f5db62b0ad65eb3f64c1c7eeef99b286a8f5a309a3ccea7c41d6f2a9c0221009daf8076c7f2cd449d216cd809d1906295d848581b43e5a800374a8c10c98e07:922c64590222798bb761d5b6d8e72950