Dns Missing Dmarc Record
Description
Detects when a domain is missing a DMARC (Domain-based Message Authentication, Reporting, and Conformance) DNS record. DMARC records are critical for email security as they help prevent email spoofing, phishing, and other email-based attacks by defining how email receivers should handle messages that fail authentication.
Detection Strategy
• 1. Extracts the base domain from the target URL (e.g., example.com from https://www.example.com)
• 2. Queries DNS for DMARC records by checking _dmarc.domain.com
• 3. Reports a vulnerability if no DMARC record is found for the domain
• 4. Ignores and continues scanning if DNS queries fail or time out
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.