Closed liquidsec closed 2 weeks ago
This PR adds or updates the follow signature:
identifiers: cnames: [] ips: [] nameservers: [] not_cnames: [] matcher_rule: matchers: - dsl: - Host != ip type: dsl - condition: or part: header type: word words: - error.ghost.org - offline.ghost.org - status: 302 type: status matchers-condition: and mode: http service_name: ghost takeover detection source: nucleitemplates
Test results:
Signature Pass: true :heavy_check_mark:
Add or update signature: nucleitemplates_ghost-takeover.yml
This PR adds or updates the follow signature: