Skip to content

Commit

Permalink
Merge pull request #8274 from joaonevess/fix-dns-elastic-beanstalk-ta…
Browse files Browse the repository at this point in the history
…keover

Fixed dns/elasticbeanstalk-takeover.yaml
  • Loading branch information
pussycat0x authored Sep 29, 2023
2 parents a87af2f + 366d4a3 commit 98bfb90
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions dns/elasticbeanstalk-takeover.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ id: elasticbeanstalk-takeover

info:
name: ElasticBeanstalk Subdomain Takeover Detection
author: philippedelteil,rotemreiss,zy9ard3
author: philippedelteil,rotemreiss,zy9ard3,joaonevess
severity: high
description: ElasticBeanstalk subdomain takeover detected. A subdomain takeover occurs when an attacker gains control over a subdomain of a target domain. Typically, this happens when the subdomain has a canonical
name (CNAME) in the Domain Name System (DNS), but no host is providing content for it.
Expand Down Expand Up @@ -35,7 +35,7 @@ dns:
matchers:
- type: regex
regex:
- CNAME\t.*\.(us|af|ap|ca|eu|me|sa)\-(east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com
- CNAME\t.*\.(us|af|ap|ca|eu|me|sa|il)\-(north|east|west|south|northeast|southeast|central)\-[1-9]+\.elasticbeanstalk\.com

- type: word
words:
Expand Down

0 comments on commit 98bfb90

Please sign in to comment.