Skip to content

Twitch phishing Detection

ID: twitch-phish

Severity: info

Author: rxerium

Tags: phishing,twitch,osint

A twitch phishing website was detected

id: twitch-phish
info:
name: Twitch phishing Detection
author: rxerium
severity: info
description: |
A twitch phishing website was detected
reference:
- https://twitch.tv
metadata:
max-request: 1
tags: phishing,twitch,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Twitch is an interactive livestreaming service for content spanning gaming, entertainment, sports, music, and more. There’s something for everyone on Twitch.'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"twitch.tv")'
# digest: 4b0a00483046022100b2404280279888c3bc40113cb475f50de24c3c9a53edaca87a55fc253dad1f12022100fd9e786c92c772c1d16918cc687202828c48c6991f79ef20ae5c1f66d6ed5df7:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/osint/phishing/twitch-phish.yaml"

View on Github