[hunt975]

So I have a list of subdomains that I need to check whether it they are active or not so that I can check whether subdomain takeover is possible or not..

How do i do that... ??

web pentesting beginner here.. please help..

[compalabee]

So I have a list of subdomains that I need to check whether it they are active or not so that I can check whether subdomain takeover is possible or not..

How do i do that... ??

web pentesting beginner here.. please help..

I heard nahamsec mention Aquatone for this job.

PHP Code


<?php 
https://github.com/michenriksen/aquatone 


Personally though I don't use it. I tend to skip port scans when I test domains en-masse.

For best results with subdomain enumeration, you can try to feed a wordlist into a host command.

PHP Code


<?php 
host <wordlist entry> 


And watch out for echoes that show aliases to, for example, GitHub Pages or AWS or whatever.

[BigJoe7413]

try https://hackking.net/subdomain-takeover-scanner/

[hunt975]

try https://hackking.net/subdomain-takeover-scanner/

Thank you so much..! that was helpful..

---

I heard nahamsec mention Aquatone for this job.

PHP Code


<?php 
https://github.com/michenriksen/aquatone 


Personally though I don't use it. I tend to skip port scans when I test domains en-masse.

For best results with subdomain enumeration, you can try to feed a wordlist into a host command.

PHP Code


<?php 
host <wordlist entry> 


And watch out for echoes that show aliases to, for example, GitHub Pages or AWS or whatever.

ill definitely try them.. thank you so much..