Skip to content

GoHire Takeover Detection

ID: gohire-takeover

Severity: high

Author: philippedelteil

Tags: takeover,gohire

id: gohire-takeover
info:
name: GoHire Takeover Detection
author: philippedelteil
severity: high
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/403
metadata:
max-request: 1
tags: takeover,gohire
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
part: body
words:
- 'You may have followed an invalid link or the job you are looking for has been archived'
- type: status
status:
- 404
extractors:
- type: dsl
dsl:
- cname
# digest: 4b0a00483046022100c91570e64f8674ac604b0d6746624f294ead4573130317eaddca66c874e6dee6022100ba0487e83d43334e09d2649745d0bce9f3655bf337a7ddc222bfef1a17b76504:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/takeovers/gohire-takeover.yaml"

View on Github