diff --git a/http/osint/user-enumeration/substack.yaml b/http/osint/user-enumeration/substack.yaml new file mode 100644 index 0000000000..baf9eef9c7 --- /dev/null +++ b/http/osint/user-enumeration/substack.yaml @@ -0,0 +1,34 @@ +id: substack + +info: + name: substack.com User Name Information - Detect + author: cheesymoon + severity: info + description: substack.com user name information check was conducted. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0 + cwe-id: CWE-200 + metadata: + max-request: 1 + tags: osint,substack + +self-contained: true + +http: + - method: GET + path: + - "https://substack.com/@{{user}}" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "No people found for" + negative: true + + - type: word + part: body + words: + - 'handle\":\"{{user}}\"'