formatting
parent
39ad0b0f68
commit
cf48f45e13
|
@ -1,79 +1,83 @@
|
|||
id: soa-detect
|
||||
|
||||
info:
|
||||
name: SOA record service detection
|
||||
name: SOA Record Service - Detection
|
||||
author: rxerium
|
||||
severity: info
|
||||
description: Detects which domain provider a domain is using, detected through SOA records
|
||||
description: |
|
||||
Detects which domain provider a domain is using, detected through SOA records
|
||||
reference:
|
||||
- https://www.cloudflare.com/learning/dns/dns-records/dns-soa-record/
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
tags: dns,soa
|
||||
|
||||
dns:
|
||||
- name: "{{FQDN}}"
|
||||
|
||||
type: SOA
|
||||
|
||||
matchers-condition: or
|
||||
matchers:
|
||||
- type: word
|
||||
name: "Cloudflare"
|
||||
name: "cloudflare"
|
||||
words:
|
||||
- "dns.cloudflare.com"
|
||||
|
||||
- type: word
|
||||
name: "Amazon Web Services"
|
||||
name: "amazon-web-services"
|
||||
words:
|
||||
- "awsdns"
|
||||
|
||||
- type: word
|
||||
name: "Akamai"
|
||||
name: "akamai"
|
||||
words:
|
||||
- "hostmaster.akamai.com"
|
||||
|
||||
- type: word
|
||||
name: "Azure"
|
||||
name: "azure"
|
||||
words:
|
||||
- "azure-dns.com"
|
||||
|
||||
- type: word
|
||||
name: "NS1"
|
||||
name: "ns1"
|
||||
words:
|
||||
- "nsone.net"
|
||||
|
||||
- type: word
|
||||
name: "Verizon"
|
||||
name: "verizon"
|
||||
words:
|
||||
- "verizon.com"
|
||||
|
||||
- type: word
|
||||
name: "Google Cloud Platform"
|
||||
name: "google-cloud-platform"
|
||||
words:
|
||||
- "googledomains.com"
|
||||
- "google.com"
|
||||
|
||||
- type: word
|
||||
name: "Alibaba"
|
||||
name: "alibaba"
|
||||
words:
|
||||
- "alibabadns.com"
|
||||
|
||||
- type: word
|
||||
name: "Safeway"
|
||||
name: "safeway"
|
||||
words:
|
||||
- "safeway.com"
|
||||
|
||||
- type: word
|
||||
name: "Mark Monitor"
|
||||
name: "mark-monitor"
|
||||
words:
|
||||
- "markmonitor.com"
|
||||
- "markmonitor.zone"
|
||||
|
||||
- type: word
|
||||
name: "Hetznet"
|
||||
name: "hetznet"
|
||||
words:
|
||||
- "hetzner.com"
|
||||
|
||||
- type: word
|
||||
name: "Edge Cast"
|
||||
name: "edge-cast"
|
||||
words:
|
||||
- "edgecastdns.net"
|
Loading…
Reference in New Issue