nuclei-templates/takeovers/aws-bucket-takeover.yaml

35 lines
655 B
YAML

id: aws-bucket-takeover
info:
name: AWS Bucket Takeover Detection
author: pdteam
severity: high
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/36
tags: takeover,aws,bucket
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
words:
- "The specified bucket does not exist"
- type: dsl
dsl:
- contains(tolower(all_headers), 'x-guploader-uploadid')
negative: true
- type: word
part: host
words:
- "amazonaws.com"