Merge pull request #6808 from zy9ard3/main

Update elasticbeantalk-takeover.yaml

dns/elasticbeantalk-takeover.yaml

@@ -2,7 +2,7 @@ id: elasticbeantalk-takeover
 
 info:
   name: ElasticBeanTalk Subdomain Takeover Detection
-  author: philippedelteil,rotemreiss
+  author: philippedelteil,rotemreiss,zy9ard3
   severity: high
   description: ElasticBeanTalk subdomain takeover detected. A subdomain takeover occurs when an attacker gains control over a subdomain of a target domain. Typically, this happens when the subdomain has a canonical
     name (CNAME) in the Domain Name System (DNS), but no host is providing content for it.
@@ -35,7 +35,7 @@ dns:
 
       - type: regex
         regex:
-          - \.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
+          - CNAME\t[a-z0-9_-]*\.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
 
       - type: word
         words:

exposures/tokens/mapbox/mapbox-token-disclosure.yaml

@@ -17,12 +17,6 @@ requests:
       - "{{BaseURL}}"
 
     extractors:
-      - type: regex
-        name: mapbox-public-token
-        part: body
-        regex:
-          - 'pk\.eyJ1Ijoi\w+\.[\w-]*'
-
       - type: regex
         name: mapbox-secret-token
         part: body