search

punk-security / dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
GNU Affero General Public License v3.0
1.93k stars 150 forks source link

We should fetch the root domain records where a record is an NS record #141

Closed SimonGurney closed 1 year ago

SimonGurney commented 1 year ago

Where the record is an NS record, we test for NS takeover, but the domain may still be vulnerable to a traditional takeover. We should load CNAME/A/AAAA records for NS records.

SimonGurney commented 1 year ago

We already do this actually