id: uptime-takeover info: name: Uptime Takeover Detection author: philippedelteil severity: high reference: - https://github.com/EdOverflow/can-i-take-over-xyz/issues/368 metadata: max-request: 1 tags: takeover,uptime http: - method: GET path: - "{{BaseURL}}" matchers-condition: and matchers: - type: dsl dsl: - Host != ip - type: word part: body words: - 'You are being redirected.' - type: status status: - 302 extractors: - type: dsl dsl: - cname # digest: 4a0a0047304502202ee256ff8303277e0793efabe63c1f567845e6f89ce38edb620e7bcb9c145658022100a00a7a76512203d66a4c893d0c6c59612e970e808c5cb193377531f8669cf9b4:922c64590222798bb761d5b6d8e72950