subdomain-takeover

Fast and customizable vulnerability scanner based on simple YAML based DSL.

OneForAll是一款功能强大的子域收集工具

Subdomain Takeover tool written in Go

A Powerful Subdomain Takeover Tool

Python 3.5+ DNS asynchronous brute force utility

Subdomain takeover vulnerability checker

Perform subdomain enumeration through various techniques and retrieve detailed output to aid in further testing.

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

A python tool to check subdomain takeover vulnerability

Powerful Visual Subdomain Enumeration at the Click of a Mouse

List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)

Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3

A tool for testing subdomain takeover possibilities at a mass scale.

Reconnaissance tool of Penetration test & Bug Bounty

SubR3con is a script written in python. It uses Sublist3r to enumerate all subdomains of a specific target and then it checks for status code for possible subdomain takeover vulnerability. This works great with Subover.go

Fast Subdomain Takeover Enumeration tool written in Go

Offensive Terraform module which takes over a subdomain which has a CNAME record pointing to non-existing S3 bucket in target's Route53. The module creates a S3 bucket with a name as subdomain in the specific AWS region that CNAME record is pointing to. Also, it uploads a simple web page with "404 Page Not Found" text.

Python Tools For Checking Subdomain TakeOver Vulnerbility

Find sites vulnerable to github subdomain takeover

Kickdomain is a subdomain enumeration and takeover checker tool

Subdomain Takeover Automation

S-ubdomain TAKE-over

We all know about the famous spyse.com this python3 scripts scrounges subdomains without the api from spyse cybersecurity search engine

Potential subdomain takeover via vulnerable Alias

This small script tries to detect subdomain takeovers from a list of domains. Fingerprints are taken from https://github.com/EdOverflow/can-i-take-over-xyz.

Robust Subdomain Takeover Tool