id: flywheel-takeover

info:
  name: Flywheel Subdomain Takeover
  author: smaranchand
  severity: high
  reference:
    - https://smaranchand.com.np/2021/06/flywheel-subdomain-takeover
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.html:"Flywheel"
  tags: takeover,flywheel

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: or
    matchers:
      - type: word
        part: body
        words:
          - "We're sorry, you've landed on a page that is hosted by Flywheel"
          - "<h1>Oops! That's not the site<br>you're looking&nbsp;for.</h1>"
        condition: and

      - type: word
        part: body
        words:
          - "We are sorry, you've landed on a page that is hosted by Flywheel"

# digest: 490a004630440220222d7f505d31d0ae9cd4ed2f2077a871019339422cdfe96fd1abd0e0794688ac022067967e782a5d5bea7d27e3e1603b7c19ecdb077e019c95c6061099b504cf74cf:922c64590222798bb761d5b6d8e72950