Closed liquidsec closed 1 year ago
This PR adds or updates the follow signature:
identifiers: cnames: [] ips: [] nameservers: [] not_cnames: [] matcher_rule: matchers: - dsl: - Host != ip type: dsl - condition: and part: body type: word words: - ngrok.io not found - Tunnel *.ngrok.io not found matchers-condition: and mode: http service_name: Ngrok Takeover Detection source: nucleitemplates
Test results:
Signature Pass: true :heavy_check_mark:
blocking in favor of dnsReaper signature
Add or update signature: nucleitemplates_ngrok-takeover.yml
This PR adds or updates the follow signature: