subdomain-takeover

What problem does it solve?

This Skill automates the detection of subdomain takeover vulnerabilities, which can be exploited to host malicious content or intercept sensitive data.

Core Features & Use Cases

• Automated Detection: Identifies dangling CNAME, NS, and MX records pointing to cloud services that can be claimed.
• Impact Analysis: Assesses the potential severity of a takeover based on how the subdomain is used (e.g., CSP, CORS, OAuth).
• Second-Order Takeovers: Detects vulnerabilities where a trusted third-party domain has a claimable subdomain.
• Use Case: A security team can use this skill to proactively scan their entire attack surface for subdomain takeover risks before attackers can exploit them.

Quick Start

Run the subdomain-takeover skill against the target domain example.com.