sherlock-project / sherlock

Hunt down social media accounts by username across social networks
https://sherlockproject.xyz
MIT License
59.66k stars 6.86k forks source link

False positiv on Gurushots.com #1447

Closed Warriermaple closed 1 year ago

Warriermaple commented 2 years ago

Checklist

Description

When browsing to Guruhosts.com/{random username that won't exist}/photos you end up on an error page that in the html is written as a 404 but is actually a 200 when looking in dev-tools or burpsuite. This seems to cause the false positive.

spmedia commented 2 years ago

Also known as a "soft 404" where it returns a 200 status.

Easily fixed by updating it like below to use message instead of status

"GuruShots": { "errorMsg": "This page doesn't exist", "errorType": "message", "url": "https://gurushots.com/{}/photos", "urlMain": "https://gurushots.com/", "username_claimed": "blue", "username_unclaimed": "noonewouldeverusethis7"

sdushantha commented 2 years ago

@spmedia feel free to create a PR