nuclei-templates/takeovers/intercom-takeover.yaml

27 lines
538 B
YAML
Raw Blame History

This file contains ambiguous Unicode characters!

This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.

id: intercom-takeover
info:
name: intercom takeover detection
author: pdteam
severity: high
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz
tags: takeover,intercom
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
words:
- '<h1 class="headline">Uh oh. That page doesn\t exist.</h1>'
- 'This page is reserved for artistic dogs.'
condition: and