Skip to content

False positive for: Giphy #2734

@Tnmae

Description

@Tnmae

Additional info

Giphy is returning false positive presumably due to cloudflare protection after checking through the dump-response flag, which return a status_code of 403 everytime, regardless of whether user exists or not.

[*] Checking username doesNotExist on:

+++++++++++++++++++++
TARGET NAME   : Giphy
USERNAME      : doesNotExist
TARGET URL    : https://giphy.com/doesNotExist
TEST METHOD   : ['message']
Results...
RESPONSE CODE : 403
ERROR TEXT    : <title> GIFs - Find &amp; Share on GIPHY</title>
>>>>> BEGIN RESPONSE TEXT

<<<<< END RESPONSE TEXT
VERDICT       : Claimed
+++++++++++++++++++++
[+] Giphy: https://giphy.com/doesNotExist

[*] Search completed with 1 results

C:\Users\ttyag>sherlock --local colehaan --site Giphy --dump-response
[*] Checking username colehaan on:

+++++++++++++++++++++
TARGET NAME   : Giphy
USERNAME      : colehaan
TARGET URL    : https://giphy.com/colehaan
TEST METHOD   : ['message']
Results...
RESPONSE CODE : 403
ERROR TEXT    : <title> GIFs - Find &amp; Share on GIPHY</title>
>>>>> BEGIN RESPONSE TEXT

<<<<< END RESPONSE TEXT
VERDICT       : Claimed
+++++++++++++++++++++
[+] Giphy: https://giphy.com/colehaan```
in these cases, the user doesNotExist lives upto it's name, whereas colehaan exists, both returning the same status_code. 

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

No one assigned

    Labels

    false positiveA site is responding with false positives

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions