-
- Notifications
You must be signed in to change notification settings - Fork 8.4k
Open
Labels
false positiveA site is responding with false positivesA site is responding with false positives
Description
Additional info
Giphy is returning false positive presumably due to cloudflare protection after checking through the dump-response flag, which return a status_code of 403 everytime, regardless of whether user exists or not.
[*] Checking username doesNotExist on: +++++++++++++++++++++ TARGET NAME : Giphy USERNAME : doesNotExist TARGET URL : https://giphy.com/doesNotExist TEST METHOD : ['message'] Results... RESPONSE CODE : 403 ERROR TEXT : <title> GIFs - Find & Share on GIPHY</title> >>>>> BEGIN RESPONSE TEXT <<<<< END RESPONSE TEXT VERDICT : Claimed +++++++++++++++++++++ [+] Giphy: https://giphy.com/doesNotExist [*] Search completed with 1 results C:\Users\ttyag>sherlock --local colehaan --site Giphy --dump-response [*] Checking username colehaan on: +++++++++++++++++++++ TARGET NAME : Giphy USERNAME : colehaan TARGET URL : https://giphy.com/colehaan TEST METHOD : ['message'] Results... RESPONSE CODE : 403 ERROR TEXT : <title> GIFs - Find & Share on GIPHY</title> >>>>> BEGIN RESPONSE TEXT <<<<< END RESPONSE TEXT VERDICT : Claimed +++++++++++++++++++++ [+] Giphy: https://giphy.com/colehaan``` in these cases, the user doesNotExist lives upto it's name, whereas colehaan exists, both returning the same status_code. ### Code of Conduct - [x] I agree to follow this project's Code of Conduct Metadata
Metadata
Assignees
Labels
false positiveA site is responding with false positivesA site is responding with false positives