id: azure-db-enum

info:
  name: Azure Databases - Cloud Enumeration
  author: initstring
  severity: info
  description: |
    Searches for Azure databases via their registered DNS names
  metadata:
    verified: true
    max-request: 1
  tags: cloud,enum,cloud-enum,azure,dns

self-contained: true

variables:
  BaseDNS: "database.windows.net"

dns:
  - name: "{{wordlist}}.{{BaseDNS}}"
    type: A
    class: inet

    recursion: true

    attack: batteringram
    matchers:
      - type: word
        part: answer
        words:
          - "IN\tA"
# digest: 4a0a00473045022100996d1a8d7019d1d042888717ee86616809f7ccea1ef47eb0aaaa0e2416b874300220085a76c67e4cd35b6d3a6ce40b9923c00f76857411201bb5d2fe81e195cefb7e:922c64590222798bb761d5b6d8e72950