ded0c4de57
Removing takeover templates with no actual impact
2021-09-07 21:31:35 +05:30
77103bc629
Satisfying the linter (all errors and warnings)
...
* whitespace modifications only
2021-08-19 17:44:46 +03:00
f55d6b75e1
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:12 +03:00
7b29be739e
Merge branch 'master' into dynamic_attributes
2021-08-19 16:23:26 +03:00
cdf9451158
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:44:27 +03:00
820b9baf87
minor update
2021-08-16 23:03:21 +05:30
e9ddcbd915
Update announcekit-takeover.yaml
2021-08-16 22:29:39 +05:30
5671e89f95
add announcekit-takeover.yaml
2021-08-16 18:06:05 +02:00
4610ecb97b
Add files via upload
2021-08-16 18:01:41 +02:00
11b976406b
vercel takeover update
...
moved severity to info as it requires manual verification.
2021-08-08 19:51:42 +05:30
76f4a0131f
Fixed ghost-takeover template
2021-08-08 19:23:42 +05:30
e896a8982d
misc updates
2021-08-02 12:53:35 +05:30
d2970f3529
misc changes
2021-07-17 23:55:56 +05:30
9eabca6e4c
Updated Heroku and netlify takeover detection
2021-07-17 22:55:19 +06:00
120d2d7544
Change the severity to info
...
This attack isn't possible
Ref - https://github.com/EdOverflow/can-i-take-over-xyz/issues/206#issuecomment-869354802
2021-07-13 19:27:02 +05:30
c0396ad58b
Update wix-takeover.yaml
2021-07-12 15:29:23 +05:30
0453f8e589
Create wix-takeover.yaml
2021-07-12 13:16:21 +05:30
1c982979e4
Update ceros-takeover.yaml
2021-07-10 15:03:54 +05:30
152ef6f809
Update ceros-takeover.yaml
2021-07-10 14:56:54 +05:30
7dc4669049
Create ceros-takeover.yaml
2021-07-06 22:16:40 -04:00
4538e18675
Update sprintful-takeover.yaml
2021-06-28 20:57:18 +05:30
2fddcb265d
Added sprintful-takeover
2021-06-28 20:54:44 +05:30
2ccd670b66
Create flywheel-takeover.yaml
2021-06-24 20:05:36 +05:30
83ce809e8d
Updated author names
2021-06-09 17:50:56 +05:30
6244641122
Merge pull request #1633 from pdelteil/patch-5
...
Update smartling-takeover.yaml
2021-06-06 14:06:51 +05:30
c8dd574555
Minor improvements
2021-06-06 12:07:19 +05:30
888cc6418d
Update smartling-takeover.yaml
...
There's no evidence the takeover is possible. Is not possible to create an account or request for a demo.
https://github.com/EdOverflow/can-i-take-over-xyz/issues/67
2021-06-05 12:35:27 -04:00
ba0d092d4d
Update landingi-takeover.yaml
2021-06-05 09:40:37 +05:30
2a8605e777
Update bitbucket-takeover.yaml
2021-05-31 03:35:34 +05:30
6af263bb30
Matcher update
2021-05-31 03:34:10 +05:30
bb71a2b9a0
strikingly-takeover - Improved matcher
2021-05-07 14:33:07 +05:30
d8311165a5
Wufoo-takeover - Improved matcher
2021-05-07 14:24:40 +05:30
62f1da31fb
Removing unbounce-takeover
2021-05-07 14:20:54 +05:30
1dc592a59a
Merge pull request #1431 from pdelteil/patch-2
...
Update tilda-takeover.yaml
2021-05-07 14:18:03 +05:30
a1510f8529
minor update
2021-05-07 14:16:54 +05:30
992355d052
AWS takeover - Improved matcher
2021-05-07 14:13:35 +05:30
c0db77d9f9
Update tilda-takeover.yaml
...
This update is based on this issue https://github.com/EdOverflow/can-i-take-over-xyz/issues/155
2021-05-06 23:57:24 -04:00
83b1149532
Added freshservice
2021-05-02 16:22:04 +05:30
349e9df1b6
Update freshdesk-takeover.yaml
2021-05-02 12:54:37 +05:30
77f276e4a6
Update freshdesk-takeover.yaml
...
freshservice and freshsdesk are different services from the same provider. Adding the condition negative true will only output freshdesk take overs, I created another template to detect only freshservice take overs.
2021-05-02 03:11:01 -04:00
e254f7b884
Update fastly-takeover.yaml
2021-04-28 16:57:07 +05:30
d1792193d5
Merge pull request #1197 from rtcms/master
...
Updated severity of acquia-takeover to info
2021-04-05 00:14:17 +05:30
fc5546e472
Updated severity to info
...
Updated severity to info because it' not vulnerable according to https://github.com/EdOverflow/can-i-take-over-xyz/issues/103
2021-04-05 00:03:23 +05:30
80d53a7df3
Update wordpress-takeover.yaml
2021-04-02 19:41:56 +00:00
9aff53118b
matcher fix
2021-04-02 02:18:44 +05:30
fff23cf462
Update medium-takeover.yaml
2021-04-01 00:13:15 +05:30
7a742b10d8
Added Subdomain takeover via Medium
...
Ref - https://hackerone.com/reports/1034023
2021-03-31 22:59:57 +05:30
98325f8655
few updates / fixes
2021-03-31 19:21:10 +05:30
915628a20b
Update freshdesk-takeover
2021-03-31 16:04:58 +03:00
70425d69c3
Create freshdesk-takeover
2021-03-31 15:53:54 +03:00
c8646b6f92
Update wordpress-takeover.yaml
...
nuclei -t /tmp/wordpress-takeover.yaml -target https://9824q75q435yq2345.wordpress.com
[2021-03-23 14:12:16] [wordpress-takeover] [http] [high] https://9824q75q435yq2345.wordpress.com
2021-03-23 19:13:34 +00:00
7c5e7f48ff
Update wordpress-takeover.yaml
2021-03-23 18:00:14 +00:00
92b2125676
Update wordpress-takeover.yaml
2021-03-23 17:58:48 +00:00
de9bcdaa5b
Update wordpress-takeover.yaml
2021-03-23 17:52:57 +00:00
f6daf90e92
Update wordpress-takeover.yaml
...
Better matcher fix. \m/
2021-03-23 17:50:47 +00:00
83bab07dd6
Improved matcher
2021-03-23 23:11:39 +05:30
5d1e9b7a20
Update worksites-takeover.yaml
...
fix for matchers type
2021-03-19 01:44:06 +02:00
2681f60fb8
Update ngrok-takeover.yaml
2021-03-18 17:13:49 +05:30
f6908465dc
Breakdown of takeover templates (thanks to request clustering)
2021-03-18 16:53:29 +05:30
042b54862e
Added worksites takeover and service detection
2021-03-18 12:19:24 +05:30
2cae5a2cad
Updated shopify check!
2021-02-22 17:31:33 +05:30
9cb97df4e9
more tags
2021-02-12 11:49:06 +05:30
106da77fc3
Preparing for request clustering
2021-01-13 13:01:46 +05:30
187e4a5feb
moving more files around
2021-01-09 18:32:04 +05:30
21ea71e4c1
moving to new directory structure
2021-01-08 17:11:53 +05:30
sandeep
forgedhallpass
Mohamed Elbadry
Prial Islam
RT
Harsh kumar
Prince Chaddha
abison1
sandeep
Prince Chaddha
Philippe Delteil
Geeknik Labs
Gal Nagli
sandeep