#subto

Nuclei
sponsor
Nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Subjack
featured
Subjack

Subdomain Takeover tool written in Go.

subzy
subzy

Subdomain takeover vulnerability checker.

subtake
subtake

Extension of sublister tool to check for subdomain takeovers.

sub404
sub404

A fast tool to check subdomain takeover vulnerability.

Rock-ON
Rock-ON

All in one recon tool that just get a single domain name and do all of the work alone.

Can I Take Over DNS?
Can I Take Over DNS?

A list of DNS providers and how to claim (sub)domains via missing hosted zones.

SubDomainizer
SubDomainizer

A tool to find subdomains and interesting things hidden inside.

takeover
takeover

A tool for testing subdomain takeover possibilities at a mass scale.

Second Order
Second Order

Second-order subdomain takeover scanner.

HostileSubBruteforcer
HostileSubBruteforcer

Bruteforce existing subdomains and provide informations about them.

tko-subs
tko-subs

A tool that can help detect and takeover subdomains with dead DNS records.

subHijack
subHijack

Hijacking forgotten & misconfigured subdomains.

Can I take over XYZ?
Can I take over XYZ?

A list of services and how to claim (sub)domains with dangling DNS records.

NSBrute
NSBrute

Python utility to takeover domains vulnerable to AWS NS Takeover.

autoSubTakeover
autoSubTakeover

A tool used to check if a CNAME resolves to the scope address.

SubOver
SubOver

A Powerful Subdomain Takeover Tool.

Burp-AnonymousCloud
Burp-AnonymousCloud

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

mx-takeover
mx-takeover

Focuses DNS MX records and detects misconfigured MX records.

Sudomy
Sudomy

Collects subdomains and analyzes domains performing automated reconnaissance.

dnsReaper
dnsReaper

Subdomain takeover tool for attackers, bug bounty hunters and the blue team!

DNSTake
DNSTake

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.