Skip to main content

Subdomain takeover tool

Project description

kickdomain

Kickdomain is a subdomain takeover checker tool

Usage

pip install kickdomain

add fb access token into config.py

or

export FB_ACCESS_TOKEN=your_access_token (get your access token here - https://developers.facebook.com/tools/explorer/)

or

add FB_ACCESS_TOKEN into .bashrc file

source .bashrc

Enumerate Subdomains only

kickdomain.py -u target.com

Enable Takeover check

kickdomain.py -u target.com -t 1

Enable Port scan for each subdomain

kickdomain.py -u target.com -p 1

Use kickdomain as a module

import kickdomain

subdomains=kickdomain.getSubdomains('target.com')

results=kickdomain.takeover_check(subdomains)

for i in results:
    if i[1]:

        print(i[0]+' vulnerable to Takeover')

    else:

        print(i[0]+' not vulnerable to Takeover')

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page