Files
nuclei-templates/http/osint/phishing/github-phish.yaml
2025-08-15 02:00:54 +00:00

35 lines
814 B
YAML

id: github-phish
info:
name: github phishing Detection
author: rxerium
severity: info
description: |
A github phishing website was detected
reference:
- https://github.com
metadata:
max-request: 1
tags: phishing,github,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Sign in to GitHub · GitHub'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"github.com")'
# digest: 490a00463044022045bc5f4c0754a3399dc89f024b9bbf99201e626d42617798df50ac281a49ce470220373b99b932be7d8419c15620eb47ae628c974838b6aeb7cdeb4668be8bfeca42:922c64590222798bb761d5b6d8e72950