Fix: sometimes dnslog request record is uppercase caused by nuclei templates uneffective #4697
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
BackGround
Recently, when I was using nuclei to scan for vulnerabilities, I found that when nuclei was verifying dnslog-related vulnerabilities, I found that there would be uppercase of dnslog records leading to the failure of nuclei's templates regular matching, resulting in the inability to effectively detect the vulnerability
Picture1: dnslog Uppercase logs fail to detect vulnerabilities
Picture2: dnslog Lowercase logging detects vulnerability
Picture3: dnslog related templates can't match uppercase
Picture4: nuclei-templates
Proposed changes
Convert uppercase letters to lowercase to ensure proper detection.
Checklist