Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates

README.md

@@ -39,11 +39,11 @@ An overview of the nuclei template directory including number of templates assoc
 | ---------------- | ------------------------------ | --------------- | ------------------------------- | -------------- | ---------------------------- |
 | cves             | 258           | vulnerabilities | 117 | exposed-panels | 113 |
 | takeovers        | 65        | exposures       | 64       | technologies   | 51   |
-| misconfiguration | 54 | workflows       | 25         | miscellaneous  | 16  |
+| misconfiguration | 54 | workflows       | 25         | miscellaneous  | 17  |
 | default-logins   | 20 | exposed-tokens  | 9  | dns            | 8            |
 | fuzzing          | 7          | helpers         | 6         | iot            | 8            |
 
-**79 directories, 847 files**.
+**79 directories, 848 files**.
 
 </td>
 </tr>

miscellaneous/detect-dns-over-https.yaml

@@ -0,0 +1,31 @@
+id: detect-dns-over-https
+
+info:
+  name: Detect DNS over HTTPS
+  author: geeknik
+  reference:
+    - https://developers.google.com/speed/public-dns/docs/doh/
+    - https://developers.cloudflare.com/1.1.1.1/dns-over-https/wireformat
+  severity: info
+  tags: dns,doh
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB"
+    headers:
+      Accept: application/dns-message
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "application/dns-message"
+        part: header
+      - type: regex
+        regex:
+          - "(C|c)ontent-(L|l)ength: 49"
+        part: header