Skip to content

eset phishing Detection

ID: eset-phish

Severity: info

Author: rxerium

Tags: phishing,eset,osint

A eset phishing website was detected

id: eset-phish
info:
name: eset phishing Detection
author: rxerium
severity: info
description: |
A eset phishing website was detected
reference:
- https://eset.com
metadata:
max-request: 1
tags: phishing,eset,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Malware Protection & Internet Security | ESET'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"eset.com")'
# digest: 4a0a0047304502210084dccf8daa86cd5e02daff8abc37a36b9f3263ffe10a829b52ecf8acfd7664c1022042069a419cb99f5f7eadabfb4b1dd3553384ecd81149fe256f4d675fe6e464f1:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/osint/phishing/eset-phish.yaml"

View on Github