nuclei-templates/miscellaneous/detect-dns-over-https.yaml

32 lines
724 B
YAML
Raw Normal View History

id: detect-dns-over-https
info:
name: Detect DNS over HTTPS
author: geeknik
reference:
- https://developers.google.com/speed/public-dns/docs/doh/
- https://developers.cloudflare.com/1.1.1.1/dns-over-https/wireformat
severity: info
2021-04-01 18:35:08 +00:00
tags: dns,doh,misc
requests:
- method: GET
path:
- "{{BaseURL}}/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB"
headers:
Accept: application/dns-message
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "application/dns-message"
part: header
- type: regex
regex:
- "(C|c)ontent-(L|l)ength: 49"
2021-03-29 09:04:50 +00:00
part: header