diff --git a/technologies/herokuapp-detect.yaml b/technologies/herokuapp-detect.yaml new file mode 100644 index 0000000000..edebaee70a --- /dev/null +++ b/technologies/herokuapp-detect.yaml @@ -0,0 +1,19 @@ +id: herokuapp-detect + +info: + name: Detect websites using Herokuapp endpoints + author: alifathi-h1 + severity: info + tags: heroku,tech + description: Detected endpoints might be vulnerable to subdomain takeover or disclose sensitive info + +requests: + - method: GET + path: + - "{{BaseURL}}" + + extractors: + - type: regex + part: body + regex: + - "[a-z0-9.-]+\\.herokuapp\\.com"