diff --git a/http/takeovers/aws-bucket-takeover.yaml b/http/takeovers/aws-bucket-takeover.yaml index 38d548e234..178e939ed4 100644 --- a/http/takeovers/aws-bucket-takeover.yaml +++ b/http/takeovers/aws-bucket-takeover.yaml @@ -2,7 +2,7 @@ id: aws-bucket-takeover info: name: AWS Bucket Takeover Detection - author: pdteam + author: pdteam,pwnhxl severity: high reference: - https://github.com/EdOverflow/can-i-take-over-xyz/issues/36 @@ -34,6 +34,29 @@ http: part: host words: - "amazonaws.com" + - "kss.ksyun.com" + - "ks3-sgp.ksyun.com" + - "ks3-cn-beijing.ksyun.com" + - "obs.jrzq.huaweicloud.com" + - "obs.petalpay.huaweicloud.com" + - "oss-cn-hangzhou.aliyuncs.com" + - "oss-cn-shanghai.aliyuncs.com" + - "oss-cn-qingdao.aliyuncs.com" + - "oss-cn-beijing.aliyuncs.com" + - "oss-cn-zhangjiakou.aliyuncs.com" + - "oss-cn-huhehaote.aliyuncs.com" + - "oss-cn-shenzhen.aliyuncs.com" + - "oss-cn-hongkong.aliyuncs.com" + - "oss-us-west-1.aliyuncs.com" + - "oss-us-east-1.aliyuncs.com" + - "oss-ap-southeast-1.aliyuncs.com" + - "oss-ap-southeast-2.aliyuncs.com" + - "oss-ap-southeast-3.aliyuncs.com" + - "oss-ap-southeast-5.aliyuncs.com" + - "oss-ap-south-1.aliyuncs.com" + - "oss-ap-northeast-1.aliyuncs.com" + - "oss-eu-central-1.aliyuncs.com" + - "oss-me-east-1.aliyuncs.com" negative: true extractors: