Skip to content

surge takeover detection

ID: surge-takeover

Severity: high

Author: pdteam

Tags: takeover

surge takeover was detected.

id: surge-takeover
info:
name: surge takeover detection
author: pdteam
severity: high
description: surge takeover was detected.
reference:
- https://github.com/EdOverflow/can-i-take-over-xyz/issues/198
metadata:
max-request: 1
tags: takeover
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: dsl
dsl:
- Host != ip
- type: word
words:
- project not found
- type: status
status:
- 404
extractors:
- type: dsl
dsl:
- cname
# digest: 4b0a00483046022100c065889b39566776f58eed33e475a3049c3d32ee28236c008c64de64fa17c2e20221008345bd3b421c35a7da869adf903a5994cbdf91a127e22dce58417f00e9c8a030:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/takeovers/surge-takeover.yaml"

View on Github