daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/miscellaneous/detect-dns-over-https.yaml

34 lines
726 B
YAML
Raw Normal View History

Create detect-dns-over-https.yaml Test validity against any known DoH host like Cloudflare or Google. Can be used to detect surreptitious DoH servers operating inside and outside of your network. ``` $ nuclei -t /opt/test/dns-over-https.yaml -target https://cloudflare-dns.com [2021-03-27 14:19:13] [detect-dns-over-https] [http] [info] https://cloudflare-dns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB ```
2021-03-27 19:26:56 +00:00
id: detect-dns-over-https
info:
name: Detect DNS over HTTPS
author: geeknik
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
severity: info
Create detect-dns-over-https.yaml Test validity against any known DoH host like Cloudflare or Google. Can be used to detect surreptitious DoH servers operating inside and outside of your network. ``` $ nuclei -t /opt/test/dns-over-https.yaml -target https://cloudflare-dns.com [2021-03-27 14:19:13] [detect-dns-over-https] [http] [info] https://cloudflare-dns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB ```
2021-03-27 19:26:56 +00:00
reference:
- https://developers.google.com/speed/public-dns/docs/doh/
- https://developers.cloudflare.com/1.1.1.1/dns-over-https/wireformat
Added more tags
2021-04-01 18:35:08 +00:00
tags: dns,doh,misc
Create detect-dns-over-https.yaml Test validity against any known DoH host like Cloudflare or Google. Can be used to detect surreptitious DoH servers operating inside and outside of your network. ``` $ nuclei -t /opt/test/dns-over-https.yaml -target https://cloudflare-dns.com [2021-03-27 14:19:13] [detect-dns-over-https] [http] [info] https://cloudflare-dns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB ```
2021-03-27 19:26:56 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB"
headers:
Accept: application/dns-message
matchers-condition: and
matchers:
- type: status
status:
- 200
misc update
2021-11-03 10:11:08 +00:00
Create detect-dns-over-https.yaml Test validity against any known DoH host like Cloudflare or Google. Can be used to detect surreptitious DoH servers operating inside and outside of your network. ``` $ nuclei -t /opt/test/dns-over-https.yaml -target https://cloudflare-dns.com [2021-03-27 14:19:13] [detect-dns-over-https] [http] [info] https://cloudflare-dns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB ```
2021-03-27 19:26:56 +00:00
- type: word
misc update
2021-11-03 10:11:08 +00:00
part: header
Create detect-dns-over-https.yaml Test validity against any known DoH host like Cloudflare or Google. Can be used to detect surreptitious DoH servers operating inside and outside of your network. ``` $ nuclei -t /opt/test/dns-over-https.yaml -target https://cloudflare-dns.com [2021-03-27 14:19:13] [detect-dns-over-https] [http] [info] https://cloudflare-dns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB ```
2021-03-27 19:26:56 +00:00
words:
- "application/dns-message"
misc update
2021-11-03 10:11:08 +00:00
Update detect-dns-over-https.yaml Every DoH server we tested with this query payload responded with a Content-Length of 49. 👍🏻
2021-03-27 21:29:35 +00:00
- type: regex
misc update
2021-11-03 10:11:08 +00:00
part: header
Update detect-dns-over-https.yaml Every DoH server we tested with this query payload responded with a Content-Length of 49. 👍🏻
2021-03-27 21:29:35 +00:00
regex:
- "(C|c)ontent-(L|l)ength: 49"