Heroku fingerprint gives false positives

Question

Heroku fingerprint gives false positives

BBerastegui opened this issue 6 years ago · 1 comments

As seen here: EdOverflow/can-i-take-over-xyz#38

The Heroku detection needs extra checks apart from the one provided in the fingerprints file.

Now it's giving false positives in cases where the domain is .herokuapp.com.

Answer 1 · 2019-02-22T13:49:30.000Z

I also experienced this with herokudns.com. Sometimes it would find it and sometimes it would not. It could also not find domains that were domain -> Cloudfront/Cloudflare -> heroku. Even with the -a parameter.