Files
nuclei-templates/code/linux/audit/dns-zone-transfer-any.yaml
2025-08-24 07:05:38 +00:00

26 lines
934 B
YAML

id: dns-zone-transfer-any
info:
name: DNS Zone Transfer Allowed to Any Host
author: songyaeji
severity: high
description: |
DNS Zone Transfer configured with "allow-transfer { any; };" allowed unrestricted zone transfers.This exposed sensitive details like hostnames, network structure, and system data that attackers could use for reconnaissance and further attacks.
reference:
- https://isms.kisa.or.kr
tags: linux,kisa,audit,compliance
self-contained: true
code:
- engine:
- bash
source: |
grep -E 'allow-transfer' /etc/named.conf 2>/dev/null || echo "no-allow-transfer"
matchers:
- type: regex
part: code_1_response
regex:
- 'allow-transfer\s*\{\s*any;\s*\}'
# digest: 4a0a00473045022100f6fedbe8d24d2614c9d21f3c4e205eae408861844a4dcff07d9df10ee3d8ae1e022062903e44fe53216996f2c26dffc0d7f742876f5127492f540e2b7c406f3eee53:922c64590222798bb761d5b6d8e72950