feat: subdomain takeover scanner
Open
enhancement
Go
scanners
- Dominant language
- JavaScript
- Stars
- 39
- Forks
- 15
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 22
Description
MVP 1
- [x] takes in dns_scanner_results from NATS
- [x] Uses fingerprint data from https://github.com/EdOverflow/can-i-take-over-xyz
- [x] Process if subdomain is vulnerable to DNS (CNAME, NS) hijacking
MVP 2
- [x] writes findings to DB with evidence, confidence level, and remediation guidance
- [ ] add value to domain documents for quick look-ups
MVP 3
- [ ] add filters for subdomain takeovers
- [ ] expose to auth'd users on api
- [ ] add frontend views
Contributor guide
Assessment
This issue has not been assessed yet.