Added Herokuapp Detection

2021-07-11 00:31:09 +08:00 · 2021-07-11 00:31:09 +08:00 · 9c0e218365
parent 4874ca4dcd
commit 9c0e218365
1 changed files with 19 additions and 0 deletions
--- a/technologies/herokuapp-detect.yaml
+++ b/technologies/herokuapp-detect.yaml
@ -0,0 +1,19 @@
+id: herokuapp-detect 
+
+info:
+  name: Detect websites using Herokuapp endpoints   
+  author: alifathi-h1
+  severity: info
+  tags: heroku,tech
+  description: Detected endpoints might be vulnerable to subdomain takeover or disclose sensitive info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "[a-z0-9.-]+\\.herokuapp\\.com"