Files
nuclei-templates/http/osint/phishing/github-phish.yaml
2025-06-12 12:10:07 +00:00

35 lines
816 B
YAML

id: github-phish
info:
name: github phishing Detection
author: rxerium
severity: info
description: |
A github phishing website was detected
reference:
- https://github.com
metadata:
max-request: 1
tags: phishing,github,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Sign in to GitHub · GitHub'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"github.com")'
# digest: 4a0a00473045022100e9075d621ae78ff8f481e9b08e48cca5236c14cea388b967ef35c09b4a402a77022044d1ea3f1026632d7a16fce283f3604319aea222df7d360424928dd09477c6ed:922c64590222798bb761d5b6d8e72950