Subdomain takeover
Named by 5 kept items in this workspace.
Search every workspace for Subdomain takeover. It matches the name as written, so it can find other things that share it.
The items that name it 5
subdomain_takeover escalation chain
Checked via TLS + subdomain takeover probing
CNAME record analysis, dangling DNS detection, service fingerprinting (GitHub Pages, Heroku, etc.)
Subdomain takeover hunting specialist agent, ref #145
Attacker claims a dangling DNS CNAME target (e.g. an unregistered domain like dangling.com) to gain control over a subdomain of the target domain and its DNS zone/server
All techniques in this workspace.