15 Repos
Utilities for identifying and exploiting dangling DNS records.
Explore 15 awesome GitHub repositories matching part of an awesome list · Subdomain Takeover Tools. Refine with filters or upvote what's useful.
Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate reconnaissance, vulnerability scanning, and exploit verification. It functions as a dockerized security toolkit that coordinates multiple tools into a unified automated pipeline to identify security flaws across network and web assets. The platform features an attack surface manager for discovering internet-facing assets through OSINT, DNS enumeration, and certificate transparency. It distinguishes itself with an AI-powered security analyzer that uses large language models to summarize scan
Scans for dangling DNS records to detect and prevent potential subdomain takeover vulnerabilities.
reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
Identifies dangling CNAME records and unclaimed cloud resources that can be hijacked.
dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
High-accuracy tool for subdomain takeover detection.
DNS Takeover tool written in Go
Go-based tool for detecting subdomain takeovers.
Subdomain takeover vulnerability checker
Fingerprint-based subdomain takeover scanner.
A Powerful Subdomain Takeover Tool
Powerful tool for identifying subdomain takeover vulnerabilities.
A tool that can help detect and takeover subdomains with dead DNS records
Detects and exploits subdomains with dead DNS records.
This app will bruteforce for exisiting subdomains and provide the following information: - IP address - Host - if the 3rd party host has been properly setup. (for example if site.example.com is poiting to a nonexisiting Heroku subdomain, it'll alert you) -> Currently only works with AWS, Github,…
Brute forces subdomains to check for takeover potential.
Second-order subdomain takeover scanner
Scanner for second-order subdomain takeover vulnerabilities.
A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.
Checks if CNAMEs resolve to non-scope addresses.
Python utility to takeover domains vulnerable to AWS NS Takeover
Utility for taking over domains vulnerable to AWS NS takeover.
A tool for testing subdomain takeover possibilities at a mass scale.
Mass-scale subdomain takeover testing tool.
take a list of resolved subdomains and output any corresponding CNAMES en masse.
Extracts CNAME records from lists of subdomains.
Community-maintained repository for tracking subdomain takeover vulnerability status.
Back-up of my old unmaintained GitHub repositories
Hijacks forgotten or misconfigured subdomains.