2023-06-09 19:52:56 +05:30
|
|
|
id: dns-http-proto-prefix
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: multi protocol request with dynamic values
|
|
|
|
|
author: pdteam
|
|
|
|
|
severity: info
|
|
|
|
|
|
|
|
|
|
dns:
|
|
|
|
|
- name: "{{FQDN}}" # DNS Request
|
|
|
|
|
type: cname
|
|
|
|
|
|
|
|
|
|
ssl:
|
|
|
|
|
- address: "{{Hostname}}" # ssl request
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET # http request
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}"
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
2024-12-17 11:08:42 +01:00
|
|
|
- contains(http_body, 'ProjectDiscovery') # check for http string
|
2024-11-19 12:38:25 +07:00
|
|
|
- dns_cname == 'cname.vercel-dns.com' # check for cname (extracted information from dns response)
|
|
|
|
|
- ssl_subject_cn == 'cloud.projectdiscovery.io'
|
2023-06-09 19:52:56 +05:30
|
|
|
condition: and
|