Merge pull request #8376 from zy9ard3/main

Elasticbeanstalk Takeover - Fix for non-vulnerable false positives

dns/elasticbeanstalk-takeover.yaml

@@ -34,7 +34,7 @@ dns:
     matchers:
       - type: regex
         regex:
-          - CNAME\t.*\.(us|af|ap|ca|eu|me|sa|il)\-(north|east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
+          - CNAME\t[a-z0-9_-]*\.(us|af|ap|ca|eu|me|sa|il)\-(north|east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
 
       - type: word
         words:

http/takeovers/heroku-takeover.yaml

@@ -1,34 +0,0 @@
-id: heroku-takeover
-
-info:
-  name: Heroku Takeover Detection
-  author: 0xPrial,pdteam
-  severity: high
-  reference:
-    - https://github.com/EdOverflow/can-i-take-over-xyz/issues/38
-  metadata:
-    max-request: 1
-  tags: takeover,heroku
-
-http:
-  - method: GET
-    path:
-      - "{{BaseURL}}"
-
-    matchers-condition: and
-    matchers:
-      - type: dsl
-        dsl:
-          - Host != ip
-
-      - type: word
-        words:
-          - "herokucdn.com/error-pages/no-such-app.html"
-
-      - type: word
-        words:
-          - "<title>No such app</title>"
-          - "<title>Heroku | Application Error</title>"
-        condition: or
-
-# digest: 4b0a00483046022100ed8e5671e88e78354921f9d5fc4dd53263597a735a32bc0be3180fc019be5537022100c7ccbe6fc0cbe69101baf2f452bbea37ba315ebca813795cc0a825c6735a0c26:922c64590222798bb761d5b6d8e72950