add a new pattern to detect more cases

htrgouvea · Oct 24, 2024 · a4a96ff · a4a96ff
1 parent e72e36d
commit a4a96ff
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/lib/Spellbook/Exploit/S3_Bucket_Takeover.pm b/lib/Spellbook/Exploit/S3_Bucket_Takeover.pm
@@ -15,13 +15,16 @@ package Spellbook::Exploit::S3_Bucket_Takeover {
 
         if ($target) {
             if ($target !~ /^http(s)?:\/\//x) {
-                $target = "https://$target";
+                $target = "http://$target";
             }
 
             my $userAgent = Spellbook::Core::UserAgent -> new();
             my $request = $userAgent -> get($target);
 
-            if ($request -> code() == 404 && $request-> content() =~ m/Code: NoSuchBucket/x) {
+            if (
+                ($request -> code() == 404) &&
+                (($request-> content() =~ m/Code: NoSuchBucket/x) || ($request-> content() =~ m/<Code>NoSuchBucket<\/Code>/x))
+            )  {
                 push @result, $target;
             }