Closed liquidsec closed 10 months ago
Add a module that would parse a page for links. In particular, we want javascript/css that is being included into the page.
We are looking for content that doesn't load...
Then subject the domain to the various signatures, both by looking at the domain name itself, and (if it loads) the http-based signatures
Any matches would be reported differently, basically referencing the resource that could be hijacked
subtypes could be:
-Hijackable Javascript Resource -Hijackable CSS Resource -Hijackable CORS trust -Hijackable CSP trust
etc
initial version added in https://github.com/blacklanternsecurity/baddns/pull/387
Add a module that would parse a page for links. In particular, we want javascript/css that is being included into the page.
We are looking for content that doesn't load...
Then subject the domain to the various signatures, both by looking at the domain name itself, and (if it loads) the http-based signatures
Any matches would be reported differently, basically referencing the resource that could be hijacked
subtypes could be:
-Hijackable Javascript Resource -Hijackable CSS Resource -Hijackable CORS trust -Hijackable CSP trust
etc