Skip to content

BIMI Record - Detection

ID: bimi-record-detect

Severity: info

Author: rxerium

Tags: dns,bimi

A BIMI record was detected

id: bimi-record-detect
info:
name: BIMI Record - Detection
author: rxerium
severity: info
description: |
A BIMI record was detected
reference:
- https://postmarkapp.com/blog/what-the-heck-is-bimi
metadata:
max-request: 1
tags: dns,bimi
dns:
- name: "{{FQDN}}"
type: TXT
matchers:
- type: word
words:
- "v=BIMI1"
extractors:
- type: regex
regex:
- "v=BIMI1(.+)"
# digest: 490a0046304402206e0eb73c04c6f6f6f168c20189dbff394a72a615b65980cad4bc982c5e6a00b202205e0b65c4ff4cd2c54be294551e08c6aff1c43efb59e71fc5f6eca42213651341:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "dns/bimi-detect.yaml"

View on Github