2022-03-09 14:55:37 +00:00
id : caa-fingerprint
info :
2022-03-23 13:33:16 +00:00
name : CAA Record
2022-03-09 14:55:37 +00:00
author : pdteam
severity : info
2022-04-22 10:38:41 +00:00
description : A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.
2022-03-23 13:33:16 +00:00
reference :
- https://support.dnsimple.com/articles/caa-record/#whats-a-caa-record
classification :
cwe-id : CWE-200
2022-03-25 14:16:18 +00:00
tags : dns,caa
2022-03-09 14:55:37 +00:00
dns :
- name : "{{FQDN}}"
type : CAA
matchers :
- type : word
words :
- "IN\tCAA"
extractors :
- type : regex
group : 1
regex :
- 'issue "(.*)"'
- 'issuewild "(.*)"'
2022-03-23 13:33:16 +00:00
- 'iodef "(.*)"'
# Enhanced by mp on 2022/03/22
