How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
A tool for testing subdomain takeover possibilities at a mass scale.
The main features of mzfr/takeover are: Subdomain Takeover Tools.
Open-source alternatives to mzfr/takeover include: six2dez/reconftw — reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the… 1n3/sn1per — Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate… cybercdh/cnames — take a list of resolved subdomains and output any corresponding CNAMES en masse. ice3man543/subover — A Powerful Subdomain Takeover Tool. jordyzomer/autosubtakeover — A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might… haccer/subjack — DNS Takeover tool written in Go.
reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate reconnaissance, vulnerability scanning, and exploit verification. It functions as a dockerized security toolkit that coordinates multiple tools into a unified automated pipeline to identify security flaws across network and web assets. The platform features an attack surface manager for discovering internet-facing assets through OSINT, DNS enumeration, and certificate transparency. It distinguishes itself with an AI-powered security analyzer that uses large language models to summarize scan
take a list of resolved subdomains and output any corresponding CNAMES en masse.
