Check subdomains for subdomain takeovers and other DNS tomfoolery
Project description
BadDNS
Check subdomains for subdomain takeovers and other DNS tomfoolery
BadDNS is a standalone tool and BBOT module for detecting domain/subdomain takeovers of all kinds, including other DNS issues like NSEC walks and Subdomain Takeovers.
Installation
We have a pypi package, so you can just do pip install baddns
to make use of the library.
Usage
After installing with pip, you can just run baddns
from the command line.
baddns [-h] [-n CUSTOM_NAMESERVERS] [-c CUSTOM_SIGNATURES] [-l] [-m MODULES] [-d] [target]
positional arguments:
target subdomain to analyze
options:
-h, --help show this help message and exit
-n CUSTOM_NAMESERVERS, --custom-nameservers CUSTOM_NAMESERVERS
Provide a list of custom nameservers separated by comma.
-c CUSTOM_SIGNATURES, --custom-signatures CUSTOM_SIGNATURES
Use an alternate directory for loading signatures
-l, --list-modules List available modules and their descriptions.
-m MODULES, --modules MODULES
Comma separated list of module names to use. Ex: module1,module2,module3
-d, --debug Enable debug logging
Examples
- Simple check
baddns subdomaintocheck.example.com
- Specify Module(s)
baddns -m CNAME subdomaintocheck.example.com
baddns -m CNAME,NS subdomaintocheck.example.com
- List available Modules
baddns -l
- Custom Nameservers
baddns -n 1.1.1.1 subdomaintocheck.example.com
Documentation
Please visit our full documentation for many more details, including information about specific BadDNS modules.
Acknowledgements
BadDNS Signatures are sourced primarily from Nuclei Templates and from dnsReaper by Punk Security, although many have been modified or updated in BadDNS. Much of the research contained in the signatures was originally discussed on the issues page of can-i-take-over-xyz.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.