Analyze DNS records and HTTP responses to identify subdomain takeover vulnerabilities.
npx skills add https://github.com/Skobyn/talon --skill hunt-subdomain-skobyn
Please help me install this Agent Skill. Skill: hunt-subdomain Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-subdomain Command: npx skills add https://github.com/Skobyn/talon --skill hunt-subdomain-skobyn
This Skill assists in identifying and reporting subdomain takeover vulnerabilities, helping to maintain domain integrity and trust.
Run the skill with the target domain to enumerate subdomains and identify potential takeover vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To find subdomain takeover vulnerabilities, this skill analyzes DNS records, HTTP responses, and cloud provider fingerprints. It enumerates subdomains using tools like subfinder and amass, then checks for dangling DNS entries indicating potential takeover points.
Modern provider fingerprints for subdomain takeover detection include signatures for cloud services like Azure, Vercel, and Zendesk. The skill matches these fingerprints against HTTP responses and DNS records to identify unclaimed subdomains vulnerable to takeover.
Manual verification of a subdomain takeover involves analyzing technical indicators from DNS and HTTP signals, then following the provided hunting methodology. The skill supplies step-by-step instructions for validating technical signals and assessing the potential impact and severity.
Yes, subdomain takeover hunting works directly with subfinder and nuclei. The skill integrates these tools alongside amass, dnsx, and subjack to enumerate subdomains, analyze DNS records, and detect vulnerable technical signals across the target domain.
DNS and HTTP signals indicating a subdomain takeover include dangling CNAME records pointing to unprovisioned cloud resources and specific HTTP error responses. The skill monitors these attack surface signals to detect potential vulnerabilities.
To assess the impact of a subdomain takeover, the skill evaluates chain and composition techniques alongside real-world impact examples. It helps determine the consequences of domain integrity and trust loss resulting from the vulnerability.
zebbernEnumerate subdomains with Subfinder, Amass, and Httpx pipelines.
woohyun212Detect and verify subdomain takeover via dangling CNAME records.
woohyun212Query crt.sh Certificate Transparency logs to extract deduplicated subdomains.
uphiagoDetect subdomain takeover risks from dangling CNAME records.
