misc update

patch-1
sandeep 2021-09-29 18:14:28 +05:30
parent 1858d54cd8
commit d4690b5849
1 changed files with 3 additions and 7 deletions

View File

@ -4,13 +4,8 @@ info:
name: Azure takeover detection name: Azure takeover detection
author: pdteam author: pdteam
severity: high severity: high
tags: dns,takeover tags: dns,takeover,azure
reference: reference: https://godiego.co/posts/STO/
- https://godiego.tech/posts/STO/ # kudos to @secfaults for sharing process details.
# Update the list with more CNAMEs related to Azure
# You need to claim the CNAME in Azure portal (https://portal.azure.com) to confirm the takeover.
# Do not report this without claiming the CNAME.
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"
@ -40,6 +35,7 @@ dns:
- "search.windows.net" - "search.windows.net"
- "servicebus.windows.net" - "servicebus.windows.net"
- "visualstudio.com" - "visualstudio.com"
- type: word - type: word
words: words:
- "NXDOMAIN" - "NXDOMAIN"