Files
nuclei-templates/dns/nameserver-fingerprint.yaml
2025-10-26 16:17:37 +00:00

28 lines
723 B
YAML

id: nameserver-fingerprint
info:
name: NS Record Detection
author: pdteam
severity: info
description: An NS record was detected. An NS record delegates a subdomain to a set of name servers.
classification:
cwe-id: CWE-200
metadata:
max-request: 1
tags: dns,ns,discovery
dns:
- name: "{{FQDN}}"
type: NS
matchers:
- type: regex
part: answer
regex:
- "IN\tNS\\t(.+)$"
extractors:
- type: regex
group: 1
regex:
- "IN\tNS\t(.+)"
# digest: 4b0a00483046022100a6b2abfc2bd7678540f6723e3a3821069ed0bd6d784f067076a88d0335b39bd8022100d4f7bbb67593e3040921a0ebed6f9efc3057167cc3915c0ba6a6918059d9f6d8:922c64590222798bb761d5b6d8e72950