id: azure-db-enum

info:
  name: Azure Databases - Cloud Enumeration
  author: initstring
  severity: info
  description: |
    Searches for Azure databases via their registered DNS names
  metadata:
    verified: true
    max-request: 1
  tags: cloud,enum,cloud-enum,azure,dns

self-contained: true

variables:
  BaseDNS: "database.windows.net"

dns:
  - name: "{{wordlist}}.{{BaseDNS}}"
    type: A
    class: inet

    recursion: true

    attack: batteringram
    matchers:
      - type: word
        part: answer
        words:
          - "IN\tA"
# digest: 490a0046304402202d82e21007ea9d2f9d609d5737dc4073c578f37b06b0023c12b39024ed7b63c302203b740c9bff84e6e2e21d0edf1cde2ed9dc4d878a5bf35e6080edfe32cb24fee0:922c64590222798bb761d5b6d8e72950