Update elasticbeantalk-takeover-detection.yaml

patch-1
Prince Chaddha 2021-09-14 16:59:42 +05:30 committed by GitHub
parent d38052f05a
commit 81fbbf0280
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 2 deletions

View File

@ -25,17 +25,21 @@ dns:
class: inet class: inet
recursion: true recursion: true
retries: 3 retries: 3
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: regex - type: regex
name: elasticbeanstalk name: elasticbeanstalk
regex: regex:
# Only CNAMEs with region specification are hijackable. # Only CNAMEs with region specification are hijackable.
- \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com - \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
condition: or condition: or
- type: word - type: word
words: words:
- "NXDOMAIN" - "NXDOMAIN"
extractors: extractors:
- type: regex - type: regex
group: 1 group: 1