Files
nuclei-templates/cloud/enum/aws-app-enum.yaml

37 lines
848 B
YAML

id: aws-app-enum
info:
name: AWS Apps - Cloud Enumeration
author: initstring
severity: info
description: |
Searches for AWS apps (WorkDocs, WorkMail, Connect, etc.)
metadata:
verified: true
max-request: 1
tags: cloud,enum,cloud-enum,aws,discovery
self-contained: true
variables:
BaseDNS: "awsapps.com"
http:
- raw:
- |
GET https://{{wordlist}}.{{BaseDNS}} HTTP/1.1
Host: {{wordlist}}.{{BaseDNS}}
redirects: false
attack: batteringram
threads: 10
matchers:
- type: status
name: "Registered AWS App"
status:
- 200
- 302
condition: or
# digest: 4a0a0047304502202b00629a52cbcc198e7d34d2b64cb589c7f1e3656d03bf8c2c83b46cb0cd93bc022100dd71dc5ea04e3d278424d15691609e6c3a3967ba614fc43af74f11911acc25a1:922c64590222798bb761d5b6d8e72950