subdomain-takeover

Detect subdomain takeover vulnerabilities by automating the analysis of CNAME, NS, and MX records for dangling pointers pointing to claimable cloud services. This process identifies exposed subdomains before attackers can exploit them to host malicious content.

A second-order subdomain takeover occurs when a trusted third-party domain has a claimable subdomain. It is assessed by examining trusted external domains for dangling pointers, extending vulnerability detection beyond the primary target's attack surface.

Analyze the impact of a subdomain takeover on CSP and CORS configurations by evaluating the context in which the vulnerable subdomain is used. This impact analysis assesses potential severity based on sensitive data interception risks.

Yes, you can scan your cloud security attack surface for dangling CNAME records automatically. The automated detection evaluates various cloud services to identify and assess claimable resources across your external infrastructure.

Yes, subdomain takeover detection works for OAuth configurations by evaluating how the vulnerable subdomain is used. It assesses potential severity by checking if exploited dangling records can intercept sensitive OAuth authentication data.