mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
99 lines
2.2 KiB
Markdown
99 lines
2.2 KiB
Markdown
# API Reference: Broken Link Hijacking
|
|
|
|
## Concept
|
|
Broken Link Hijacking (BLH) occurs when a website links to external resources
|
|
that no longer exist. An attacker can register the expired resource (domain,
|
|
GitHub repo, npm package) to serve malicious content via the trusted site.
|
|
|
|
## Hijackable Platforms
|
|
|
|
| Platform | Hijack Vector |
|
|
|----------|---------------|
|
|
| GitHub | Register abandoned username/repo |
|
|
| npm | Publish unclaimed package name |
|
|
| PyPI | Register unclaimed package |
|
|
| Twitter/X | Claim abandoned handle |
|
|
| BitBucket | Register abandoned team/repo |
|
|
| Custom domain | Register expired domain |
|
|
|
|
## Python requests — Link Checking
|
|
|
|
### HEAD Request
|
|
```python
|
|
import requests
|
|
resp = requests.head(url, timeout=10, allow_redirects=True, verify=False)
|
|
# 404 = broken link, potential hijack
|
|
```
|
|
|
|
### Connection Error = Domain Takeover
|
|
```python
|
|
try:
|
|
requests.head(url, timeout=5)
|
|
except requests.ConnectionError:
|
|
print("Domain may be unregistered - takeover possible")
|
|
```
|
|
|
|
## HTML Link Extraction
|
|
|
|
### Regex Patterns
|
|
```python
|
|
import re
|
|
# href links
|
|
re.finditer(r'href=["\']([^"\']+)', html)
|
|
# src links
|
|
re.finditer(r'src=["\']([^"\']+)', html)
|
|
```
|
|
|
|
## Domain Availability Check
|
|
|
|
### WHOIS Lookup
|
|
```bash
|
|
whois expired-domain.com
|
|
# "No match for" = available for registration
|
|
```
|
|
|
|
### DNS Check
|
|
```bash
|
|
dig expired-domain.com +short
|
|
# Empty = no DNS records (likely available)
|
|
```
|
|
|
|
## GitHub API — Check Username Availability
|
|
|
|
### Check user exists
|
|
```http
|
|
GET https://api.github.com/users/username
|
|
```
|
|
- 200 = exists
|
|
- 404 = available for registration
|
|
|
|
### Check repo exists
|
|
```http
|
|
GET https://api.github.com/repos/owner/repo
|
|
```
|
|
|
|
## npm Registry — Check Package
|
|
|
|
```http
|
|
GET https://registry.npmjs.org/package-name
|
|
```
|
|
- 200 = exists
|
|
- 404 = available for registration
|
|
|
|
## Subdomain Takeover Indicators
|
|
|
|
### CNAME to Unclaimed Service
|
|
```bash
|
|
dig CNAME old-service.example.com
|
|
# old-service.example.com. CNAME unregistered.herokuapp.com.
|
|
```
|
|
|
|
### Common Vulnerable Services
|
|
| Service | Indicator |
|
|
|---------|-----------|
|
|
| GitHub Pages | 404 "There isn't a GitHub Pages site here" |
|
|
| Heroku | "No such app" |
|
|
| AWS S3 | "NoSuchBucket" |
|
|
| Azure | "404 Web Site not found" |
|
|
| Shopify | "Sorry, this shop is currently unavailable" |
|