nuclei-templates/http/osint/phishing/roblox-phish.yaml

34 lines
953 B
YAML

id: roblox-phish
info:
name: roblox phishing Detection
author: rxerium
severity: info
description: |
A roblox phishing website was detected
reference:
- https://roblox.com
tags: phishing,roblox,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Roblox is ushering in the next generation of entertainment. Imagine, create, and play together with millions of people across an infinite variety of immersive, user-generated 3D worlds.'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"roblox.com")'
# digest: 4a0a0047304502202c51b9fbc6b80831a76f9b598e2f8b4291a3bbba6f9fdde75f9856d96241496e0221009a1780825c553195d6e10d81bec4253ff8ad5423e69879580a57b670a88c0148:922c64590222798bb761d5b6d8e72950