nuclei-templates/cloud/enum/azure-vm-cloud-enum.yaml

65 lines
1.3 KiB
YAML

id: azure-vm-cloud-enum
info:
name: Azure Virtual Machines - Cloud Enumeration
author: initstring
severity: info
description: |
Searches for Azure virtual machines via their registered DNS names.
metadata:
verified: true
tags: cloud,cloud-enum,azure
self-contained: true
variables:
BaseDNS: "cloudapp.azure.com"
regionname:
- eastasia
- southeastasia
- centralus
- eastus
- eastus2
- westus
- northcentralus
- southcentralus
- northeurope
- westeurope
- japanwest
- japaneast
- brazilsouth
- australiaeast
- australiasoutheast
- southindia
- centralindia
- westindia
- canadacentral
- canadaeast
- uksouth
- ukwest
- westcentralus
- westus2
- koreacentral
- koreasouth
- francecentral
- francesouth
- australiacentral
- australiacentral2
- southafricanorth
- southafricawest
dns:
- name: "{{wordlist}}.{{regionname}}.{{BaseDNS}}"
type: A
class: inet
recursion: true
attack: batteringram
matchers:
- type: word
part: answer
words:
- "IN\tA"
# digest: 4b0a004830460221008d223bfdb3585e335e8282ca206945a6f7704dab4a2899d3410229bf0db7132d022100b9de9af2b393a559575b67a5b25b6334fe8cddd1ceed5059ee634dc3b0292d50:922c64590222798bb761d5b6d8e72950