nuclei-templates/dns/cname-fingerprint.yaml

31 lines
601 B
YAML

id: cname-fingerprint
info:
name: CNAME Fingerprint
author: pdteam
severity: info
description: A CNAME DNS record was discovered.
reference:
- https://www.theregister.com/2021/02/24/dns_cname_tracking/
- https://www.ionos.com/digitalguide/hosting/technical-matters/cname-record/
classification:
cwe-id: CWE-200
tags: dns,cname
dns:
- name: "{{FQDN}}"
type: CNAME
matchers:
- type: word
words:
- "IN\tCNAME"
extractors:
- type: regex
group: 1
regex:
- "IN\tCNAME\t(.+)"
# Enhanced by mp on 2022/03/13