nuclei/pkg/tmplexec/flow/testcases/condition-flow-no-operators.yaml

23 lines
314 B
YAML
Raw Permalink Normal View History

id: ghost-blog-detection
info:
name: Ghost blog detection
author: pdteam
severity: info
flow: dns() && http()
dns:
- name: "{{FQDN}}"
type: CNAME
http:
- method: GET
path:
- "{{BaseURL}}?ref={{dns_cname}}"
matchers:
- type: word
words:
- "ghost.io"