Files
nuclei-templates/dns/ptr-fingerprint.yaml
2025-10-26 16:17:37 +00:00

28 lines
688 B
YAML

id: ptr-fingerprint
info:
name: PTR Detected
author: pdteam
severity: info
description: A PTR record was detected. A PTR record refers to the domain name.
classification:
cwe-id: CWE-200
metadata:
max-request: 1
tags: dns,ptr,discovery
dns:
- name: "{{FQDN}}"
type: PTR
matchers:
- type: regex
part: answer
regex:
- "IN\tPTR\\t(.+)$"
extractors:
- type: regex
group: 1
regex:
- "IN\tPTR\t(.+)"
# digest: 490a0046304402200dbdaf684f2917eb46b8c2b25fb404675f12153c5c1aaa8c85e381a2977ee1a102206e2ec20b600b37ac8cd2910b4f8ba9b63912825dcf413832c3029dc55f1a36a8:922c64590222798bb761d5b6d8e72950