blacklanternsecurity / baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery
GNU General Public License v3.0
96 stars 5 forks source link

[SignatureBot] Add or update signature nucleitemplates_tave-takeover.yml #355

Open liquidsec opened 1 year ago

liquidsec commented 1 year ago

Add or update signature: nucleitemplates_tave-takeover.yml

This PR adds or updates the follow signature:

identifiers:
  cnames: []
  ips: []
  nameservers: []
  not_cnames: []
matcher_rule:
  matchers:
  - dsl:
    - Host != ip
    type: dsl
  - condition: and
    part: body
    type: word
    words:
    - '<h1>Error 404: Page Not Found</h1>'
  matchers-condition: and
mode: http
service_name: tave takeover detection
source: nucleitemplates
liquidsec commented 1 year ago

This string is far too common without a corresponding cname, requires more research.