Skip to content

Gemfury Takeover Detection

ID: gemfury-takeover

Severity: high

Author: pdteam,daffainfo

Tags: takeover,gemfury

Gemfury takeover was detected.

id: gemfury-takeover
info:
name: Gemfury Takeover Detection
author: pdteam,daffainfo
severity: high
description: Gemfury takeover was detected.
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/154
metadata:
max-request: 1
tags: takeover,gemfury
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 1
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
part: header
words:
- "Location: https://gemfury.com/404"
extractors:
- type: dsl
dsl:
- cname
# digest: 4a0a00473045022044151a8b136f425d9a15e4d659a13722178a5af443b025dc90ca68f4d3bf641c022100b603bf4d9c909befd31e35488baedccd235c53f38ffe29f9ac1e70e38a903273:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/takeovers/gemfury-takeover.yaml"

View on Github