id: freshservice-takeover

info:
  name: freshservice takeover detection
  author: philippedelteil
  severity: info
  tags: takeover
  reference: https://twitter.com/secuaudit/status/1142514805590433793

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        words:
          - 'There is no helpdesk here!'
          - 'Maybe this is still fresh!'
          - 'freshservice.com'
        condition: and