Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

OneForAll是一款功能强大的子域收集工具

Subdomain Takeover tool written in Go

Subdomain takeover vulnerability checker

"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

A Powerful Subdomain Takeover Tool

Subdomain and target enumeration tool built for offensive security testing

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

Python 3.5+ DNS asynchronous brute force utility

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

A python tool to check subdomain takeover vulnerability

The Internets #1 Subdomain Takeover Tool

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

find dangling domains in a multi cloud environment

Powerful Visual Subdomain Enumeration at the Click of a Mouse

Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3

Find subdomains and takeovers.

A fast subdomain takeover tool

List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)

A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services that could possibly lead to subdomain takeover scenarios.

A tool for testing subdomain takeover possibilities at a mass scale.

Multi-functional Web Recon & Vulnerability Scanner Tool

Reconnaissance tool of Penetration test & Bug Bounty

Command-line tool to detect email spoofing vulnerabilities by analyzing SPF and DMARC DNS records. Supports single and bulk domain checks with multiple output formats.

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

SubR3con is a script written in python. It uses Sublist3r to enumerate all subdomains of a specific target and then it checks for status code for possible subdomain takeover vulnerability. This works great with Subover.go

A script to test for subdomain takeovers from a list of domains

This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides information, methodology and resources to perform subdomain takeover attacks.

my nuclei templates #new