[Feature Request] Check for subdomain takeover - Githubissues

BitTheByte / Monitorizer

Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

257 stars 49 forks source link

[Feature Request] Check for subdomain takeover #9

Closed BitTheByte closed 3 years ago

BitTheByte commented 3 years ago

Summary

Add a new module to check for subdomain takeover(s)

Roadmap:

Use subjack's fingerprint https://github.com/haccer/subjack/blob/master/fingerprints.json to detect for common subdomain takeover messages

Concerns:

1) Is it possible to decrease the false-positive ratio to 0%?

Maybe use something like an API? idk. 2) Scan for all discovered domains or just the new ones?
Scanning all domains will increase the time required to finish the scan. The real impact will show up after > 10,000 domains found. since this tool is made to be kept running 24/7 this is a critical subject
Scanning only discovered domains will not have a %100 coverage

BitTheByte commented 3 years ago

it's projectdiscovery/nuclei job now :)