Create squadcast-takeover.yaml

I tested the takeover creating an account, added a subdomain to point to the service and then linked another account with the subdomain.
patch-2
Philippe Delteil 2024-05-03 09:36:42 -05:00 committed by GitHub
parent e688a29bd5
commit 1529f2339d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 26 additions and 0 deletions

View File

@ -0,0 +1,26 @@
id: squadcast-takeover
info:
name: squadcast takeover detection
author: philippedelteil
severity: medium
tags: takeover
reference: https://github.com/EdOverflow/can-i-take-over-xyz/issues/398
requests:
- method: GET
path:
- "{{BaseURL}}"
redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'There doesnt seem to be an active status page associated with this URL.'
- 'Please check the URL and try again.'
condition: and
- type: status
status:
- 404