blacklanternsecurity / baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery
GNU General Public License v3.0
96 stars 5 forks source link

[SignatureBot] Add or update signature nucleitemplates_sprintful-takeover.yml #350

Closed liquidsec closed 1 year ago

liquidsec commented 1 year ago

Add or update signature: nucleitemplates_sprintful-takeover.yml

This PR adds or updates the follow signature:

identifiers:
  cnames: []
  ips: []
  nameservers: []
  not_cnames: []
matcher_rule:
  matchers:
  - dsl:
    - Host != ip
    type: dsl
  - condition: or
    part: body
    type: word
    words:
    - The user account associated with this calendar has been deactivated.
    - Please contact the owner of this calendar directly in order to book a meeting.
    - This domain name does not have a default page configured.
  - condition: and
    part: body
    type: word
    words:
    - Sprintful
  - status: 200
    type: status
  matchers-condition: and
mode: http
service_name: Sprintful Takeover
source: nucleitemplates
liquidsec commented 1 year ago

might actually be too strict, but not a false-positive risk

liquidsec commented 1 year ago

Test results:

Signature Pass: true :heavy_check_mark: