Files
nuclei-templates/dns/mx-fingerprint.yaml
2025-10-26 16:17:37 +00:00

31 lines
821 B
YAML

id: mx-fingerprint
info:
name: MX Record Detection
author: pdteam
severity: info
description: An MX record was detected. MX records direct emails to a mail exchange server.
reference:
- https://www.cloudflare.com/learning/dns/dns-records/dns-mx-record/
- https://mxtoolbox.com/
classification:
cwe-id: CWE-200
metadata:
max-request: 1
tags: dns,mx,discovery
dns:
- name: "{{FQDN}}"
type: MX
matchers:
- type: regex
part: answer
regex:
- "IN\tMX\\t(.+)$"
extractors:
- type: regex
group: 1
regex:
- "IN\tMX\t(.+)"
# digest: 4b0a00483046022100aeb625d9619948b86940e6f4ee55196f90e301d9d0c8a305e952f60dcfcb03be0221008aeecf2cb3dfe3f61c529e61f931a7627d5a0e8508cc26ed49f19489fe8119c9:922c64590222798bb761d5b6d8e72950