awesome-repositories.com
Blog
MCP
awesome-repositories.com

Descubre los mejores repositorios open-source con nuestra búsqueda potenciada por IA.

ExplorarBúsquedas curadasAlternativas open-sourceSoftware autohospedableBlogMapa del sitio
ProyectoServidor MCPAcerca deCómo clasificamosPrensa
Aviso legalPrivacidadTérminos
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

15 repositorios

Awesome GitHub RepositoriesSubdomain Takeover Tools

Utilities for identifying and exploiting dangling DNS records.

Explore 15 awesome GitHub repositories matching part of an awesome list · Subdomain Takeover Tools. Refine with filters or upvote what's useful.

Awesome Subdomain Takeover Tools GitHub Repositories

Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
  • 1n3/sn1perAvatar de 1N3

    1N3/Sn1per

    10,049Ver en GitHub↗

    Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate reconnaissance, vulnerability scanning, and exploit verification. It functions as a dockerized security toolkit that coordinates multiple tools into a unified automated pipeline to identify security flaws across network and web assets. The platform features an attack surface manager for discovering internet-facing assets through OSINT, DNS enumeration, and certificate transparency. It distinguishes itself with an AI-powered security analyzer that uses large language models to summarize scan

    Scans for dangling DNS records to detect and prevent potential subdomain takeover vulnerabilities.

    Shellattack-surfaceattack-surface-managementattacksurface
    Ver en GitHub↗10,049
  • six2dez/reconftwAvatar de six2dez

    six2dez/reconftw

    7,226Ver en GitHub↗

    reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

    Identifies dangling CNAME records and unclaimed cloud resources that can be hijacked.

    Shellbug-bountybugbountybugbounty-tool
    Ver en GitHub↗7,226
  • punk-security/dnsreaperAvatar de punk-security

    punk-security/dnsReaper

    2,209Ver en GitHub↗

    dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

    High-accuracy tool for subdomain takeover detection.

    Python
    Ver en GitHub↗2,209
  • haccer/subjackAvatar de haccer

    haccer/subjack

    2,091Ver en GitHub↗

    DNS Takeover tool written in Go

    Go-based tool for detecting subdomain takeovers.

    Go
    Ver en GitHub↗2,091
  • pentestpad/subzyAvatar de PentestPad

    PentestPad/subzy

    1,565Ver en GitHub↗

    Subdomain takeover vulnerability checker

    Fingerprint-based subdomain takeover scanner.

    Go
    Ver en GitHub↗1,565
  • ice3man543/suboverAvatar de Ice3man543

    Ice3man543/SubOver

    966Ver en GitHub↗

    A Powerful Subdomain Takeover Tool

    Powerful tool for identifying subdomain takeover vulnerabilities.

    Go
    Ver en GitHub↗966
  • anshumanbh/tko-subsAvatar de anshumanbh

    anshumanbh/tko-subs

    771Ver en GitHub↗

    A tool that can help detect and takeover subdomains with dead DNS records

    Detects and exploits subdomains with dead DNS records.

    Go
    Ver en GitHub↗771
  • nahamsec/hostilesubbruteforcerAvatar de nahamsec

    nahamsec/HostileSubBruteforcer

    479Ver en GitHub↗

    This app will bruteforce for exisiting subdomains and provide the following information: - IP address - Host - if the 3rd party host has been properly setup. (for example if site.example.com is poiting to a nonexisiting Heroku subdomain, it'll alert you) -> Currently only works with AWS, Github,…

    Brute forces subdomains to check for takeover potential.

    Ruby
    Ver en GitHub↗479
  • mhmdiaa/second-orderAvatar de mhmdiaa

    mhmdiaa/second-order

    405Ver en GitHub↗

    Second-order subdomain takeover scanner

    Scanner for second-order subdomain takeover vulnerabilities.

    Go
    Ver en GitHub↗405
  • jordyzomer/autosubtakeoverAvatar de JordyZomer

    JordyZomer/autoSubTakeover

    134Ver en GitHub↗

    A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.

    Checks if CNAMEs resolve to non-scope addresses.

    Python
    Ver en GitHub↗134
  • shivsahni/nsbruteAvatar de shivsahni

    shivsahni/NSBrute

    86Ver en GitHub↗

    Python utility to takeover domains vulnerable to AWS NS Takeover

    Utility for taking over domains vulnerable to AWS NS takeover.

    Python
    Ver en GitHub↗86
  • mzfr/takeoverAvatar de mzfr

    mzfr/takeover

    50Ver en GitHub↗

    A tool for testing subdomain takeover possibilities at a mass scale.

    Mass-scale subdomain takeover testing tool.

    Go
    Ver en GitHub↗50
  • cybercdh/cnamesAvatar de cybercdh

    cybercdh/cnames

    18Ver en GitHub↗

    take a list of resolved subdomains and output any corresponding CNAMES en masse.

    Extracts CNAME records from lists of subdomains.

    Go
    Ver en GitHub↗18
  • shifa123/can-i-take-over-xyz-v2S

    shifa123/Can-I-take-over-xyz-v2

    0Ver en GitHub↗

    Community-maintained repository for tracking subdomain takeover vulnerability status.

    Ver en GitHub↗0
  • vavkamil/old-repos-backupAvatar de vavkamil

    vavkamil/old-repos-backup

    9Ver en GitHub↗

    Back-up of my old unmaintained GitHub repositories

    Hijacks forgotten or misconfigured subdomains.

    Perl
    Ver en GitHub↗9
  1. Home
  2. Part of an Awesome List
  3. Security & Privacy
  4. Subdomain Takeover Tools