Skip to content

DNS DMARC - Detect

ID: dmarc-detect

Severity: info

Author: juliosmelo

Tags: dns,dmarc

DNS DMARC information was detected.

id: dmarc-detect
info:
name: DNS DMARC - Detect
author: juliosmelo
severity: info
description: |
DNS DMARC information was detected.
reference:
- https://dmarc.org/
- https://dmarc.org/wiki/FAQ#Why_is_DMARC_important.3F
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
max-request: 1
tags: dns,dmarc
dns:
- name: "_dmarc.{{FQDN}}"
type: TXT
matchers:
- type: regex
part: answer
regex:
- "IN\tTXT\\t(.+DMARC.+)$"
extractors:
- type: regex
group: 1
regex:
- "IN\tTXT\t(.+DMARC.+)"
# digest: 4a0a00473045022014894c5d42737b4e85a2ff74861650f92335af77e2d62214c5bff578c404b7f5022100d3e8cbf264ac4c3f998204cfc36d2f0aeae3db990ae6cc8842ab108838a796a7:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "dns/dmarc-detect.yaml"

View on Github