Skip to content
This repository has been archived by the owner on Jan 7, 2024. It is now read-only.

added several new fingerprints e.g. readthedocs.io, bigcartel.com, agilecrm.com, elasticbeanstalk.com, tilda_cc and a fix for bigcartel crm check in fingerprints file #64

Open
wants to merge 23 commits into
base: master
Choose a base branch
from
Open

added several new fingerprints e.g. readthedocs.io, bigcartel.com, agilecrm.com, elasticbeanstalk.com, tilda_cc and a fix for bigcartel crm check in fingerprints file #64

wants to merge 23 commits into from

Commits on Jul 21, 2020

  1. added fingerprint for readthedocs.io to subjack. Taken from: https://… 

    …blog.shashank.co/2020/07/subdomain-takeover-using-readthedocs.html
    Manas Bellani committed Jul 21, 2020
    Configuration menu
    Copy the full SHA
    18db176 View commit details
    Browse the repository at this point in the history

  2. minor fix to ensure that the check for bigcartel.com is performed cor… 

    …rectly
    Manas Bellani committed Jul 21, 2020
    Configuration menu
    Copy the full SHA
    0364b44 View commit details
    Browse the repository at this point in the history

  3. added agilecrm.com subdomain takeover test. More info @ EdOverflow/ca… 

    …n-i-take-over-xyz#145
    Manas Bellani committed Jul 21, 2020
    Configuration menu
    Copy the full SHA
    0d65321 View commit details
    Browse the repository at this point in the history

  4. added a check for elasticbeanstalk.com takeover. More info @ https://… 

    …www.youtube.com/watch?v=srKIqhj_ki8
    Manas Bellani committed Jul 21, 2020
    Configuration menu
    Copy the full SHA
    a1760c9 View commit details
    Browse the repository at this point in the history

  5. adding subdomain check for tilda_cc which can be taken over by signin… 

    …g up to free trial with tilda and providing your own domain name for a domain already pointing to tilda IP '185.203.72.17'
    Manas Bellani committed Jul 21, 2020
    Configuration menu
    Copy the full SHA
    44f269a View commit details
    Browse the repository at this point in the history

  6. added zendesk ssl mapping as described here: https://support.zendesk.… 

    …com/hc/en-us/community/posts/207580187-Host-Mapping-Issue
    Manas Bellani committed Jul 21, 2020
    Configuration menu
    Copy the full SHA
    db9f732 View commit details
    Browse the repository at this point in the history

Commits on Jul 22, 2020

  1. added new checks eg kinsta

    Manas Bellani committed Jul 22, 2020
    Configuration menu
    Copy the full SHA
    1d5e9de View commit details
    Browse the repository at this point in the history

  2. added 'netlify' for signature; also added a new 'checkall' flag for f… 

    …ingerprints.json file so we check both the cname and signature to reduce false positives for subdomain takeover cases e.g. netlify which provide very generic signature responses
    Manas Bellani committed Jul 22, 2020
    Configuration menu
    Copy the full SHA
    75ebdeb View commit details
    Browse the repository at this point in the history

Commits on Jul 23, 2020

  1. added signature for strikinglydns; and a minor fix added to fix error… 

    …s in CI/CD build pipeline as well
    Manas Bellani committed Jul 23, 2020
    Configuration menu
    Copy the full SHA
    47cca05 View commit details
    Browse the repository at this point in the history

  2. removed commented subjack repo - minor change

    Manas Bellani committed Jul 23, 2020
    Configuration menu
    Copy the full SHA
    f0f3258 View commit details
    Browse the repository at this point in the history

  3. added uptimerobot.com subdomain takeover check to subjack

    Manas Bellani committed Jul 23, 2020
    Configuration menu
    Copy the full SHA
    0691b27 View commit details
    Browse the repository at this point in the history

Commits on Aug 15, 2020

  1. fingerprints.json: added uberflip takeover signature which is added b… 

    …ased on Hackerone report: https://hackerone.com/reports/863551
    Manas Bellani committed Aug 15, 2020
    Configuration menu
    Copy the full SHA
    3700c29 View commit details
    Browse the repository at this point in the history

  2. added fingerprints.json file to master containing uberflip signature.… 

    … Taken from: https://hackerone.com/reports/863551
    Manas Bellani committed Aug 15, 2020
    Configuration menu
    Copy the full SHA
    7231fab View commit details
    Browse the repository at this point in the history

Commits on Aug 16, 2020

  1. fingerprints.json: added worksites.net subdomain takeover check. Take… 

    …n from:EdOverflow/can-i-take-over-xyz#142, https://worksites.net/support/how-to-use-a-custom-domain-name
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    96dbf60 View commit details
    Browse the repository at this point in the history

  2. fingerprints.json: Added check for gemfury subdomain takeover. Taken … 

    …from: EdOverflow/can-i-take-over-xyz#154
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    91c3a20 View commit details
    Browse the repository at this point in the history

  3. fingerprints.json: added a check for pingdom subdomain takeover. Take… 

    …n from: http://www.theryangriffin.com/uncategorized/subdomain-takeover-of-stat-pubnub-com/, EdOverflow/can-i-take-over-xyz#144
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    6946ed7 View commit details
    Browse the repository at this point in the history

  4. main.go: Switch subjack to the subjack repo that is using the latest … 

    …version for the new signatures
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    f83646f View commit details
    Browse the repository at this point in the history

  5. fingerprints.json: added check for ngrok tunnel. Taken from: EdOverfl… 

    …ow/can-i-take-over-xyz#92
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    d40df51 View commit details
    Browse the repository at this point in the history

  6. fingerprint.json: added check for smartjobboard subdomain takeover. T… 

    …aken from: EdOverflow/can-i-take-over-xyz#139
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    3fa3bae View commit details
    Browse the repository at this point in the history

  7. fingerprints.json: added check for hubspot subdomain takeover. Taken … 

    …from: EdOverflow/can-i-take-over-xyz#59
    Manas Bellani committed Aug 16, 2020
    Configuration menu
    Copy the full SHA
    3078c91 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2020

  1. multiple fixes including a fix for too many open files in fingerprint… 

    …s.json,
    John Edwards committed Dec 1, 2020
    Configuration menu
    Copy the full SHA
    c69672b View commit details
    Browse the repository at this point in the history

Commits on Mar 24, 2021

  1. changed loading of subjack package so it works consistently

    John Edwards committed Mar 24, 2021
    Configuration menu
    Copy the full SHA
    9b5816a View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2021

  1. updated fingerprints file for new app

    @manasmbellani
    manasmbellani committed Jul 10, 2021
    Configuration menu
    Copy the full SHA
    b4c146c View commit details
    Browse the repository at this point in the history