+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: REQUESTING HELP WITH SUBDOMAIN TAKEOVER (/showthread.php?tid=6054741)
REQUESTING HELP WITH SUBDOMAIN TAKEOVER - hunt975 - Mar 4, 2020
So I have a list of subdomains that I need to check whether it they are active or not so that I can check whether subdomain takeover is possible or not..
How do i do that... ??
web pentesting beginner here.. please help..
RE: REQUESTING HELP WITH SUBDOMAIN TAKEOVER - compalabee - Mar 5, 2020
(Mar 4, 2020 10:25 PM)hunt975 Wrote: So I have a list of subdomains that I need to check whether it they are active or not so that I can check whether subdomain takeover is possible or not..
How do i do that... ??
web pentesting beginner here.. please help..
I heard nahamsec mention Aquatone for this job.
PHP Code
<?php
https://github.com/michenriksen/aquatone
Personally though I don't use it. I tend to skip port scans when I test domains en-masse.
For best results with subdomain enumeration, you can try to feed a wordlist into a host command.
PHP Code
<?php
host <wordlist entry>
And watch out for echoes that show aliases to, for example, GitHub Pages or AWS or whatever.
RE: REQUESTING HELP WITH SUBDOMAIN TAKEOVER - BigJoe7413 - Mar 5, 2020
try https://hackking.net/subdomain-takeover-scanner/
RE: REQUESTING HELP WITH SUBDOMAIN TAKEOVER - hunt975 - Mar 7, 2020
(Mar 5, 2020 11:37 AM)BigJoe7413 Wrote: try https://hackking.net/subdomain-takeover-scanner/
Thank you so much..! that was helpful..
(Mar 5, 2020 10:22 AM)compalabee Wrote: I heard nahamsec mention Aquatone for this job.
PHP Code
<?php
https://github.com/michenriksen/aquatone
Personally though I don't use it. I tend to skip port scans when I test domains en-masse.
For best results with subdomain enumeration, you can try to feed a wordlist into a host command.
PHP Code
<?php
host <wordlist entry>
And watch out for echoes that show aliases to, for example, GitHub Pages or AWS or whatever.
ill definitely try them.. thank you so much..