-
-
Notifications
You must be signed in to change notification settings - Fork 8.2k
Open
Labels
false positiveA site is responding with false positivesA site is responding with false positives
Description
Additional info
Giphy is returning false positive presumably due to cloudflare protection after checking through the dump-response flag, which return a status_code of 403 everytime, regardless of whether user exists or not.
[*] Checking username doesNotExist on:
+++++++++++++++++++++
TARGET NAME : Giphy
USERNAME : doesNotExist
TARGET URL : https://giphy.com/doesNotExist
TEST METHOD : ['message']
Results...
RESPONSE CODE : 403
ERROR TEXT : <title> GIFs - Find & Share on GIPHY</title>
>>>>> BEGIN RESPONSE TEXT
<<<<< END RESPONSE TEXT
VERDICT : Claimed
+++++++++++++++++++++
[+] Giphy: https://giphy.com/doesNotExist
[*] Search completed with 1 results
C:\Users\ttyag>sherlock --local colehaan --site Giphy --dump-response
[*] Checking username colehaan on:
+++++++++++++++++++++
TARGET NAME : Giphy
USERNAME : colehaan
TARGET URL : https://giphy.com/colehaan
TEST METHOD : ['message']
Results...
RESPONSE CODE : 403
ERROR TEXT : <title> GIFs - Find & Share on GIPHY</title>
>>>>> BEGIN RESPONSE TEXT
<<<<< END RESPONSE TEXT
VERDICT : Claimed
+++++++++++++++++++++
[+] Giphy: https://giphy.com/colehaan```
in these cases, the user doesNotExist lives upto it's name, whereas colehaan exists, both returning the same status_code.
### Code of Conduct
- [x] I agree to follow this project's Code of Conduct
Metadata
Metadata
Assignees
Labels
false positiveA site is responding with false positivesA site is responding with false positives