Skip to content

Bigcartel Takeover Detection

ID: bigcartel-takeover

Severity: high

Author: pdteam

Tags: takeover

Bigcartel takeover was detected.

id: bigcartel-takeover
info:
name: Bigcartel Takeover Detection
author: pdteam
severity: high
description: Bigcartel takeover was detected.
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/158
metadata:
max-request: 1
tags: takeover
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
words:
- "<h1>Oops! We couldn&#8217;t find that page.</h1>"
- type: dsl
dsl:
- '!contains(host,"bigcartel.com")'
extractors:
- type: dsl
dsl:
- cname
# digest: 490a0046304402207499010c6bd650b1fdeda8a3aef22b0a935c5cfac7c2ec16003b4892d56868d302201b3226c34fd196c335f326fd0b694dad0068434bb1e67fac8fac1ab8cdcce490:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/takeovers/bigcartel-takeover.yaml"

View on Github