diff --git a/baddns/signatures/nucleitemplates_helpdocs-takeover.yml b/baddns/signatures/nucleitemplates_helpdocs-takeover.yml new file mode 100644 index 0000000..9d1f909 --- /dev/null +++ b/baddns/signatures/nucleitemplates_helpdocs-takeover.yml @@ -0,0 +1,19 @@ +identifiers: + cnames: [] + ips: [] + nameservers: [] + not_cnames: [] +matcher_rule: + matchers: + - dsl: + - Host != ip + type: dsl + - condition: and + part: body + type: word + words: + - You've tried to access an account/page that does not exist + matchers-condition: and +mode: http +service_name: HelpDocs Takeover Detection +source: nucleitemplates diff --git a/baddns/signatures/signature_history.txt b/baddns/signatures/signature_history.txt index 42f9c75..48fbcd6 100644 --- a/baddns/signatures/signature_history.txt +++ b/baddns/signatures/signature_history.txt @@ -101,5 +101,6 @@ e99f19fee1bf0128e1d15aa562fbe660780674b3189727ec9ceb9815222e94c6 #nucleitemplate 42d22a592a1738dc3c411a39da46e12feee4ef5c8229c89f5c18490b7006aa8d #dnsreaper_github_pages.yml 2dd9264885df0d12e7e7ae3d95a83c67e2595753e310453c430013fecfaa0602 #dnsreaper_smartjobboard.yml 700612eb0f8776b2732d00214159b6db94aabebc60127c251c54ae836b551cd6 #dnsreaper_teamwork.yml +9425a6cfecf6121f33769e79dc46f5c3c0b3c78861c72a856fef2f81c9abf9e0 #nucleitemplates_helpdocs-takeover.yml 22b21533c10e5859223004c0d65bc722b393e1d752c9fa7b27dc04ba315999df #nucleitemplates_uptime-takeover.yml e3a452987e0aab4f6c387dd89dc1a042590a14555274a564d5d6e5f9dfc691c9 #nucleitemplates_squadcast-takeover.yml