What problem does it solve? Web applications often reference external resources—domains, scripts, cloud buckets, and subdomains—that expire or get decommissioned, allowing attackers to claim them and serve malicious content under the target's trust. This Skill finds those dangling references before attackers do. ## Core Features & Use Cases - Dead Link Discovery: Crawl target sites with broken-link-checker, curl, and Burp Suite to extract external links, scripts, and CSS references, then identify dead or unresolvable resources. - Takeover Detection: Check dangling CNAME records, unclaimed S3 buckets, GitHub Pages, Heroku, Azure, and Shopify endpoints using subjack, nuclei, and service-specific fingerprinting. - Python Scanning Agent: Run the included agent.py script to extract external links, check their HTTP status, and flag hijackable platforms with severity ratings in a JSON report. - Use Case: During a bug bounty assessment, scan a target's pages, discover that an analytics JavaScript file loads from an expired domain, and document the full-XSS impact in a structured report. ## Quick Start Run the agent script with --url pointing at your authorized target to generate a JSON report of hijackable external links.
