Merge pull request #7031 from idealphase/main

Updated favicon-detect.yaml
patch-1
Dhiyaneshwaran 2023-05-11 00:39:28 +05:30 committed by GitHub
commit fdd61af5b2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 2 deletions

View File

@ -10,15 +10,21 @@ info:
- https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 - https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139
- https://github.com/devanshbatham/FavFreak - https://github.com/devanshbatham/FavFreak
- https://github.com/sansatart/scrapts/blob/master/shodan-favicon-hashes.csv - https://github.com/sansatart/scrapts/blob/master/shodan-favicon-hashes.csv
tags: tech,favicon
metadata: metadata:
max-request: 1 max-request: 2
tags: tech,favicon
http: http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/favicon.ico" - "{{BaseURL}}/favicon.ico"
- "{{BaseURL}}/{{path}}favicon.ico"
payloads:
path:
- images/
stop-at-first-match: true
host-redirects: true host-redirects: true
max-redirects: 2 max-redirects: 2
@ -2657,3 +2663,8 @@ http:
name: "Vue.js" name: "Vue.js"
dsl: dsl:
- "status_code==200 && (\"-1252041730\" == mmh3(base64_py(body)))" - "status_code==200 && (\"-1252041730\" == mmh3(base64_py(body)))"
- type: dsl
name: "Sophos Email Appliance"
dsl:
- "status_code==200 && (\"-830586692\" == mmh3(base64_py(body)))"