nuclei-templates/file/audit/pfsense/configure-dns-server.yaml

37 lines
937 B
YAML

id: configure-dns-server
info:
name: DNS Server Not Implemented - Detect
author: pussycat0x
severity: info
description: |
DNS is recommended to be configured over TLS. This prevents intermediate parties and potential attackers from viewing the content of DNS queries and can also assure that DNS is being provided by the expected DNS servers.
reference: |
https://docs.netgate.com/pfsense/en/latest/recipes/dns-over-tls.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
metadata:
verified: true
tags: firewall,config,audit,pfsense,file
file:
- extensions:
- xml
matchers-condition: and
matchers:
- type: word
words:
- "<dnsserver>"
negative: true
- type: word
words:
- "<pfsense>"
- "<system>"
condition: and
# Enhanced by md on 2023/05/04