search

PentestPad / subzy

Subdomain takeover vulnerability checker
https://www.pentestpad.com
GNU General Public License v2.0
989 stars 149 forks source link

Fingerprint for Gemfury is overly broad #37

Closed MegaManSec closed 1 year ago

MegaManSec commented 1 year ago

Hey there,

First off: thank you for this great tool.

It seems that the fingerprint for Gemfury is overly broad, and can likely be improved. https://github.com/LukaSikic/subzy/blob/master/runner/fingerprints.json#L285 "404: This page could not be found." applies to many 'normal' websites which are completely unrelated to Gemfury.

Is it possible to multiple fingerprints that must match on a page? "404: This page could not be found." and "RubyGems", perhaps?

Cheers

NSEcho commented 1 year ago

Hi, right now it matches the first occurrence of the match. If you are familiar more with Gemfury, please feel free to do PR with more specific fingerprint.

MegaManSec commented 1 year ago

Fixed by #38.