漏洞描述
tave takeover was detected.
id: tave-takeover
info:
name: tave takeover detection
author: pdteam
severity: high
description: tave takeover was detected.
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz
metadata:
max-request: 1
tags: takeover,vuln
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
words:
- "<h1>Error 404: Page Not Found</h1>"
extractors:
- type: dsl
dsl:
- cname
# digest: 490a0046304402200676bd12a2c407c6ad190de0d65837d10d32d071798db2b7f6d01bfa3aa89ad402201100b01179388b13bc2afc30d6df9b1c3fd5cfe5047ad1262b3a3dac5ff567b8:922c64590222798bb761d5b6d8e72950