Closed liquidsec closed 9 months ago
This PR adds or updates the follow signature:
identifiers: cnames: [] ips: [] nameservers: [] not_cnames: [] matcher_rule: matchers: - dsl: - Host != ip type: dsl - condition: and part: body type: word words: - No Site For Domain matchers-condition: and mode: http service_name: kinsta takeover detection source: nucleitemplates
Test results:
Signature Pass: true :heavy_check_mark:
too generic without cname, needs research
Reportedly this is no longer possible. Also, the string is too common and no cname seems to be available.
Add or update signature: nucleitemplates_kinsta-takeover.yml
This PR adds or updates the follow signature: