Skip to content

feat(scanners): subdomain takeover scanner - #7582

Open
lcampbell2 wants to merge 78 commits into
masterfrom
feat/subdomain-takeover-scanner
Open

lcampbell2 wants to merge 78 commits into
masterfrom
feat/subdomain-takeover-scanner

Conversation

@lcampbell2

@lcampbell2 lcampbell2 commented Sep 14, 2026

Copy link
Copy Markdown
Collaborator

New Go microservice (scanners/subdomain-takeover) that consumes DNS scan results from NATS JetStream and detects passive subdomain takeover risk.

  • Consumes scans.dns_scanner_results, evaluates CNAME and NS takeover risk against provider fingerprint data
  • Assigns confidence (suspected, probable, confirmed) via passive-only detection (no active account takeover/resource claiming)
  • Publishes findings to scans.findings.subdomain-takeover (subdomain-takeover-cname, subdomain-takeover-ns)
  • NS emission gated to exploitable outcomes only (NS_FULL_LAME_PROVIDER_VULNERABLE, NS_PARTIAL_LAME_PROVIDER_VULNERABLE)
  • Fingerprint data embedded and validated at startup; supports literal/regex body matching for CNAME providers

closes #7438

…over-scanner

# Conflicts:
#	scanners/subdomain-takeover/README.md
…r-scanner

# Conflicts:
#	scanners/subdomain-takeover/README.md
@lcampbell2
lcampbell2 marked this pull request as ready for review September 14, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: subdomain takeover scanner

1 participant