blacklanternsecurity / baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery
GNU General Public License v3.0
92 stars 5 forks source link

[SignatureBot] Add or update signature nucleitemplates_shopify-takeover.yml #422

Closed liquidsec closed 5 months ago

liquidsec commented 6 months ago

Add or update signature: nucleitemplates_shopify-takeover.yml

This PR adds or updates the follow signature:

identifiers:
  cnames:
  - type: word
    value: myshopify.com
  - type: word
    value: shopify.com
  ips: []
  nameservers: []
  not_cnames: []
matcher_rule:
  matchers:
  - dsl:
    - Host != ip
    type: dsl
  - condition: or
    part: body
    type: word
    words:
    - To finish setting up your new web address, go to your domain settings, click
      "Connect existing domain"
    - Sorry, this shop is currently unavailable.
    - Sorry, this store is currently unavailable.
  - condition: and
    part: body
    type: word
    words:
    - shop-not-found
  - condition: and
    dsl:
    - '!contains(host,"myshopify.com")'
    - '!contains(host,"shopify.com")'
    type: dsl
  matchers-condition: and
mode: http
service_name: shopify takeover detection
source: nucleitemplates
liquidsec commented 5 months ago

Test results:

Signature Pass: true :heavy_check_mark:

Match Table:

Domain Match
myshopify.com true
shopify.com true
liquidsec commented 5 months ago

Test results:

Signature Pass: true :heavy_check_mark:

Match Table:

Domain Match
myshopify.com true
shopify.com true