From 3a654ad86a67ead5413b2a5ce6190938af1c807e Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Fri, 18 Oct 2024 18:35:52 +0530 Subject: [PATCH] updated macthers --- http/takeovers/wasabi-bucket-takeover.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/http/takeovers/wasabi-bucket-takeover.yaml b/http/takeovers/wasabi-bucket-takeover.yaml index d14bfcc3cb..34a4ee1ca3 100644 --- a/http/takeovers/wasabi-bucket-takeover.yaml +++ b/http/takeovers/wasabi-bucket-takeover.yaml @@ -11,6 +11,7 @@ info: metadata: verified: true max-request: 1 + shodan-query: "wasabis3" tags: takeover,wasabi,bucket http: @@ -23,16 +24,15 @@ http: - type: dsl dsl: - Host != ip + - contains(tolower(header), "wasabis3") + condition: and + - type: word words: - "The specified bucket does not exist" - "BucketName" condition: and - - type: dsl - dsl: - - contains(tolower(header), "wasabis3") - extractors: - type: regex part: body